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Generalized Multiple Access Channels 
with Confidential Messages ^ ^ 

Yingbin Liang and H. Vincent Poor ^ 
Abstract 

' A discrete memoryless generalized multiple access channel (GMAC) with confiden- 

■ tial messages is studied, where two users attempt to transmit common information 
CN , to a destination and each user also has private (confidential) information intended for 

J>^| the destination. This channel generalizes the multiple access channel (MAC) in that 

^ ' the two users also receive channel outputs, and hence may obtain the confidential in- 

formation sent by each other from channel outputs they receive. However, each user 
views the other user as a wire-tapper, and wishes to keep its confidential informa- 
tion as secret as possible from the other user. The level of secrecy of the confidential 
information is measured by the equivocation rate, i.e., the entropy rate of the confiden- 
tial information conditioned on channel outputs at the wire-tapper. The performance 
O . measure of interest for the GMAC with confidential messages is the rate-equivocation 

tuple that includes the common rate, two private rates and two equivocation rates 
as components. The set that includes all these achievable rate-equivocation tuples is 

■ referred to as the capacity-equivocation region. For the GMAC with one confidential 
message set, where only one user (user 1) has private (confidential) information for the 
destination, inner and outer bounds on the capacity-equivocation region are derived. 
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Q \ These bounds match partially, and hence the capacity-equivocation region is partially 

■ characterized. Furthermore, the outer bound provides a tight converse to the secrecy 

■ capacity region, which is the set of all achievable rates with user 2 being perfectly igno- 
Q , rant of confidential messages of user 1, thus establishing the secrecy capacity region. A 

class of degraded GMACs with one confidential message set is further studied, and the 
capacity-equivocation region and the secrecy capacity region are established. These 
capacity results are further explored via two example degraded channels: the binary 
GMAC and the Gaussian GMAC. For both channels, the capacity-equivocation regions 
are obtained. In particular, the capacity-equivocation region of the degraded Gaus- 
sian GMAC is shown to apply to non-physically-degraded Gaussian channels as well. 
For the GMAC with two confidential message sets, where both users have confidential 
messages for the destination, an inner bound on the capacity-equivocation region is 
obtained. The secrecy rate region is derived, where each user's confidential informa- 
tion is perfectly hidden from the other user. It is demonstrated that for the case of 
two confidential message sets there is a trade-off between the two equivocation rates 



X 
J3 



^The material in this paper has been submitted in part to the IEEE International Symposium on Infor- 
mation Theory, Seattle, Washington, July 2006. 

^This research was supported by the National Science Foundation under Grant ANI-03-38807. 

^The authors are with the Department of Electrical Engineering, Princeton University, Engineering Quad- 
rangle, Olden Street, Princeton, NJ 08544; e-mail: {yingbinl ,poor}@princeton . edu 



1 



corresponding to the two confidential message sets, and this trade-off can be achieved 
by using codebooks that achieve different boundary points of the corresponding MAC. 

1 Introduction 

Two important issues in communications are reliability and security. The reliability quan- 
tifies the maximum achievable rate (capacity) with small probability of error, and has been 
studied intensively since Shannon theory was established p. Security is an important issue 
when the transmitted information is confidential and needs to be kept as secret as possible 
from wire-tappers or eavesdroppers. The level of secrecy of confidential information at a 
wire-tapper can be measured by the equivocation rate, i.e., the entropy rate of confidential 
messages conditioned on channel outputs at the wire-tapper. If both reliability and security 
are considered, the performance measure of interest is the rate-equivocation tuple that in- 
cludes both the communication rates and the equivocation rates (achieved at wire-tappers) 
as components. We refer to the set that consists of all achievable rate-equivocation tuples 
as the capacity- equivocation region. 

Communication of confidential messages has been studied in the literature for some classes 
of channels. The wire-tap channel was introduced by Wyner in [2], where a sender wishes 
to transmit information to a legitimate receiver and to keep a wire-tapper as ignorant of 
this information as possible. The channel from the sender to the legitimate receiver and the 
wire-tapper was assumed to be a degraded broadcast channel. The trade-off between the 
communication rate to the legitimate receiver and the level of ignorance at the wire-tapper 
was developed. Furthermore, the secrecy capacity was established, at which the information 
source can be reliably reconstructed at the legitimate receiver with the wire-tapper being 
perfectly ignorant of the information source. 

The broadcast channel with confidential messages was studied in [3^ as a generalization 
of the wire-tap channel, where the sender also wishes to transmit common information to 
both the legitimate receiver and the wire-tapper in addition to the private (confidential) 
information to the legitimate receiver. Moreover, the broadcast channel from the sender 
to the two receivers was assumed to be general and may not be degraded. The capacity- 
equivocation region was established for this channel, and the secrecy capacity region was 
given. The relay channel with confidential messages was studied in where the relay node 
acts as both a helper and a wire-tapper. Some other related studies on communication of 
confidential messages can be found in[SllSllZllHliniliniini[I21linilIl!. 

In this paper, we consider a two-user generalized multiple access channel (GMAC) with 
confidential messages, which generalizes the multiple access channel (MAC) jlHl Sec. 14.3] 
by allowing both users to receive noisy channel outputs. This channel model is motivated 
by wireless communications, where transmitted signals are broadcast over open media and 
can be received by all nodes within communication range. For this channel, we assume 
that two users (users 1 and 2) have common information and each user has its private 
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(confidential) information intended for a destination. Since two users also receive channel 
outputs, they may extract each other's confidential information from their received channel 
outputs. However, each user treats the other user as a wire-tapper, and wishes to keep this 
wire-tapper as ignorant of its confidential message as possible. The level of ignorance of one 
user's confidential message at the other user (wire-tapper) is measured by the equivocation 
rate. Our goal is to study the capacity-equivocation region of the GMAC with confidential 
messages. 

We first study the GMAC with one confidential message set, where two users have common 
information for the destination and only one user (user 1) has private (confidential) informa- 
tion for the destination. This channel generalizes the MAC with degraded message sets fH] 
with the further assumption that user 2 receives channel outputs and user 1 wants to keep 
user 2 as ignorant of its confidential information as possible. This model is also a counter- 
part of the broadcast channel with confidential messages studied in . For the GMAC with 
one confidential message set, we obtain inner and outer bounds on the capacity-equivocation 
region. The two bounds match partially and determine the capacity-equivocation region par- 
tially. Furthermore, the outer bound provides a tight converse to the secrecy capacity region, 
which is the set of all achievable rates with user 2 being perfectly ignorant of confidential 
messages of user 1, and we hence establish the secrecy capacity region. 

We further study the degraded GMAC with one confidential message set, where outputs 
at user 2 are degraded versions of outputs at the destination. This model generalizes the 
wire-tap channel j2] to allow user 1 and user 2 (the wire-tapper) to send common infor- 
mation to the destination. For the degraded GMAC with one confidential message set, 
we show a tight converse and establish the capacity-equivocation region and the secrecy 
capacity region. Moreover, we study these capacity results via two classes of degraded 
channels: the binary GMAC and the Gaussian GMAC. For both channels, we characterize 
the capacity-equivocation regions and secrecy capacity regions explicitly. In particular, for 
the Gaussian GMAC, we show that the capacity-equivocation region also applies to non- 
physically-degraded Gaussian channels. 

We finally study the general case of the GMAC with two confidential message sets, where 
both users have confidential messages for the destination in addition to common messages. 
We obtain an achievable rate-equivocation region (inner bound on the capacity-equivocation 
region). We demonstrate a trade-off between the two equivocation rates corresponding to the 
two set of confidential messages sent by user 1 and user 2, and this trade-off can be achieved 
by using codebooks that achieve different boundary points of the corresponding MAC. This 
trade-off is a new feature that arises in the case with two confidential message sets. Based on 
the rate-equivocation region, we derive the secrecy rate region, where confidential messages 
of each user is perfectly secret from the other user. 

In this paper, we adopt the following notation. We use upper case letters to indicate ran- 
dom variables, and we use lower case letters to indicate deterministic variables or realizations 
of the corresponding random variables. Exceptions will be clarified where they appear in 
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the paper. We use to indicate the vector (xi, . . . and use to indicate the vector 
(xj, . . . , Xn)- Throughout the paper, the logarithmic function is to the base 2. 

The organization of this paper is as follows. In Section|2l we introduce the channel model of 
the GMAC with confidential messages. In Section El we present our results for the GMAC 
with one confidential message set. In Section |1[ we present our results for the degraded 
GMAC with one confidential message set and illustrate our results by a binary example 
channel. In Sectional we focus on the Gaussian GMAC with one confidential message set. 
In Sectional we present our results for the general case of the GMAC with two confidential 
message sets, and illustrate the intuition behind the result. In the final section, we give 
concluding remarks. 



2 Channel Model 

In this section, we first define the GMAC, and then define the performance measure of 
interest for the GMAC with confidential messages. 

Definition 1. A discrete memoryless GMAC consists of two finite channel input alphabets 
Xi and X2, three finite channel output alphabets 3^, and 3^2; ond a transition probability 
distribution p{y,yi,y2\xi,X2) (see Fig. where Xi G Xi and X2 G X2 are channel inputs 
from users 1 and 2, respectively, and y & y,yi E yi and y2 G 3^2 are channel outputs at the 
destination, user 1 and user 2, respectively. 
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Figure 1: Generalized multiple access channel 



For generality, we assume that each user receives channel outputs that also depend on its 
own inputs. This assumption is also practical since transmitted signals from one user may 
cause interference at its own receiver. All results that we obtain apply to the case where 
outputs at either user do not depend on its own inputs. 
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Definition 2. A [2''^ , 2''^\ 2"^^^ n) code for the G MAC consists of the following: 

• Three message sets: Wq = {1, 2, . . . , 2"^°}, Wi = {1, 2, . . . , 2"^^} andWa = {1, 2, . . . , 2"^2}_ 
The common message Wq and private messages Wi and W2 are independent and uni- 
formly distributed over the message sets Wq, Wi and W2, respectively. 

• Two (stochastic) encoders, one at user 1: Wo x Wi — > A"", which maps each message 
pair (wo,Wi) G Wq x Wi to a codeword G X^; the other at user 2: Wq x W2 — > X2 > 
which maps each message pair (^0,^2) G Wq x W2 to a codeword X2 G A"^; 

• One decoder at the destination: 3^" Wq x Wi x W2, which maps a received sequence 
y"' to a message tuple {wo,wi,W2) G Wo x Wi x W2. 

Note that in the GMAC although users 1 and 2 can receive channel outputs (see Fig. H}, 
they are only passive listeners in that their encoding functions are not affected by these 
received outputs. However, since outputs at each user contain the other user's private (con- 
fidential) information, each user may extract the other user's private (confidential) informa- 
tion from its outputs. We assume that each user treats the other user as a wire-tapper, and 
wishes to keep the other user as ignorant of its private (confidential) messages as possible. 
We hence define the following two equivocation rates: 

at user 2: -H(Wi\Y^, X^, Wq, W2) 

^ (1) 

at user 1: -H{W2\Y.'', X" Wq, Wi) 
n 

which indicate the level of ignorance of the confidential message Wi at user 2 and the level 
of ignorance of the confidential message W2 at user 1, respectively. Note that the larger the 
equivocation rate, the higher the level of secrecy. 

For the GMAC with confidential messages, a rate-equivocation tuple {Rq, Ri, R2, -Ri,e, R2,e) 
is achievable if there exists a sequence of (2"-f^o,2"-f^i,2"-f^^n) codes with the average error 
probability Pi""* ^ as n goes to infinity and with the equivocation rates Ri^e and i?2,e 
satisfying 

hm -H{W,\Y;^,XIWo,W2) > Ri,e 

n^oon (2) 

hm -H{W2\Yr,X^,Wo,W,) > i?2,e. 

n^oo n 

Note that the rate-equivocation tuple {Rq, Ri, R2, Ri^e, R2,e) includes both the reliable com- 
munication rates and the equivocation rates, and it indicates the common and private rates 
{Rq, Ri, R2) achieved at certain levels of communication secrecy {Ri^e,R2,e) ■ 

The capacity-equivocation region, denoted by ^, is the closure of the set that consists 
of all achievable rate-equivocation tuples {Rq, Ri, R2, Ri^e, R2,e)- Our goal is to study the 
capacity-equivocation region of the GMAC with confidential messages. 
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3 GMAC with One Confidential Message Set 



In this section, we study the GMAC with one confidential message set, where user 2 has 
only common messages and does not have confidential messages for the destination. This 
model generalizes the MAC with degraded message sets studied in [16^ to consider the private 
messages sent from user 1 to be confidential, i.e., needing to be as secret as possible from 
user 2. This model is also a counterpart of the broadcast channel with confidential messages 
studied in jS]. 

In the following, we first provide inner and outer bounds on the capacity-equivocation 
region. We then present the secrecy capacity region, which includes all rates at which 
perfect secrecy can be achieved for private (confidential) messages sent by user 1. We finally 
give a proof of the outer bound on the capacity-equivocation region. 



3.1 Main Results 



For the GMAC with one confidential message set, the rate R2 = 0, and the equivocation rate 
i?2,e is not of interest. Hence channel outputs at user 1 do not play roles in the analysis. For 
notational convenience, we use Re to indicate Ri^e in this case. Now the rate-equivocation 
tuple becomes {Rq, Ri, Re); i.e., it contains three components. We use '^'^ to denote the 
capacity-equivocation region of the GMAC in this situation. 

The following two theorems provide inner and outer bounds on the capacity-equivocation 
region. 

Theorem 1. The following convexified region is an inner bound on the capacity- equivocation 
region for the GMAC with one confidential message set: 

{Rq, Ri, Re) : 
Ro >0, Ri> 0, 
Ri<IiU;Y\X2,Q), 
Convex | | ^ Rq + R^ < I{U,X2,Q;Y), 

0<Re< Ri, 

Re < [I{U; Y\X2, Q) - nU; g)] + . 

Re < [I{U, X2, Q; Y)-Ro- I{U; F2IX2, Q)]+ 

'(3) 

ifx < 0. The auxiliary random variables Q 
\X2\ + 3 and \U\ < |;fi|2. | A'2p + 4|;fi| ■ |;f2| +3, 



u 

p{q, X2)p{u\q)p{xi\u) 
p{y,y2\xi,X2) 



where the function [x]j^ = x if x > and [x]+ = 
and U are bounded in cardinality by \ Q\ < 
respectively. 



The proof of Theorem^follows from the achievable rate-equivocation region for the GMAC 
with two confidential message sets given in Theorem [3 in Section IHl This can be seen by 
setting i?2 = 0, i?2,e = 0, and V := X2, and combining (fTHjl with (jHUj) . 
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Remark 1. The last bound in (jS)) indicates that there is a trade-off' between the common 
rate and the secrecy level of confidential messages. As common rate Rq increases, the secrecy 
level of confidential messages may get lower. 

Remark 2. The rate- equivocation region (jS)) reduces to the capacity region of the MAC with 
degraded message sets given in 11 6^ by setting U = Xi and Re = 0. 

Theorem 2. The following region is an outer bound on the capacity- equivocation region of 
the GMAC with one confidential message set: 

{Rq, Ri, Re) ■ 
Ro >0, Ri> 0, 
R^<I{U;Y\X2,V), 

Ro + Ri<HU,X2,Q;Y), y (4) 

0<Re< Ri, 

Re < I{U- F|X2, Q) - I{U- F2IX2, Q), 
R, + Re<I{U,X2,Q;Y)-I{U-Y2\X2,Q) J 



u 

p{q,X2)p{u\q)p{xi\u) 
p{v\q)p{y,y2\xi,X2) 



The proof of Theorem |21 is relegated to Section 13.31 In the foUowing, we focus on the 
properties that the inner and outer bounds imply. 

Remark 3. The last four bounds in the outer bound (@)) match the last four bounds in the 
inner bound 0, and hence these four common bounds partially determine the boundary of 
the capacity- equivocation region. 



We now study the case where perfect secrecy is achieved, i.e., user 2 does not get any 
information about confidential messages that user 1 sends to the destination. This happens 
if Re = -Ri. 

Definition 3. The secrecy capacity region Cf is the region that includes all achievable rate 
pairs {Ro,Ri) such that Re = Ri, i.e., 

Ci = {(i?o, Ri) : [Ro, Ri, Ri) e ^'}. (5) 

Definition 4. For a given rate Rq, the secrecy capacity is the maximum achievable rate Ri 
with confidential messages perfectly hidden from user 2, i.e., 

CI{Rq) = max Ri. (6) 

{Ro,Ri)£Ci 



Although the outer bound given in Theorem |21 provides only a partial converse to the 
capacity-equivocation region, it is sufficiently tight to serve as the converse to the secrecy 
capacity region and secrecy capacity (as a function of the common rate Rq). 
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Theorem 3. For the GMAC with one confidential message set, the following region is the 
secrecy capacity region : 

[ iRo,Ri)-- ] 

The secrecy capacity for a given rate Rq is given by 

CiiRo) = maxmm{/(t/; Y\X2, Q) - I{U- F2IX2, Q), 

/([/, X2, Q; y) - /(f/; F2IX2, g) - i?o} 

where the maximum is taken over all joint distributions p{q,X2)p{u\q)p{xi\u)p{y^y2\xi,X2) ■ 
In both (|7j) and (jH)), the auxiliary random variables Q and U are bounded in cardinality by 
\Q\ < ■ 1X2] +3 and \U\ < ■ |A'2p + 4|A:'i| ■ \X2\ + 3, respectively. 

Proof. The achievability of fohows from the inner bound on the capacity-equivocation 
region given in Theorem^ and the converse follows from the last two bounds in the outer 
bound given in Theorem El The secrecy capacity (i?o) then easily follows from the secrecy 
capacity region . □ 

Remark 4. // we let Rq = and X2 := (j), the GMAC with one confidential message set 
reduces to the case of a broadcast channel with confidential messages studied in 0/ with the 
common rate being zero. For this channel, the secrecy capacity in (|H)) reduces to 

Cl = me.x[I{U;Y)-I{U;Y2)] (9) 

where the max is taken over all joint distribution p{u, Xi)p{y , y2\xi) . This is the same as the 
secrecy capacity given in Corollary 2 in f^. 



3.2 An Example 

In this section, we consider an example of a discrete memoryless GMAC with one confidential 
message set. We obtain the capacity-equivocation region and the secrecy capacity region for 
this channel. 

Consider a binary channel with all channel inputs and outputs having alphabets {0, 1}. 
The MAC from two users to the destination is a binary multiplier channel, and the channel 
from user 1 to user 2 is a bias channel. The channel input-output relationship (see Fig. ^ 
satisfies 

Y = X,.X2, Y2=l^' if^i<^2; ^ ^ 

'10, ifXi>X2. ^ ^ 
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Figure 3: Capacity region of binary multiplier MAC 

The capacity-equivocation region of the example channel given in ()10|) is: 

{{Rq, Ri, Re) : Rq + Ri < I, Re = Ri}- (11) 
The capacity-equivocation region implies that the secrecy capacity region of this channel is: 

{{Ro,Ri) : Ro + Ri<l}. (12) 

It is shown in jT7j that the region {{Rq,Ri) : Rq + Ri < 1} (see Fig. |2)) is the capacity 
region of the binary multiplier MAC. We now show that perfect secrecy can be achieved for 
the two corner points of this region. It is trivial that perfect secrecy can be achieved for the 
corner point [Rq = l,Ri = 0), i.e., i?e = is achievable at this point. For the other corner 
point {Rq = 0,-Ri = 1), perfect secrecy is achieved by sending {xi = 0,X2 = 1) for Wi = 
and (xi = 1,X2 = 1) for Wi = 1. When either of these two codewords is transmitted, user 2 
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always gets output Y2 = 1, and hence cannot determine whether Wi = or Wi = 1 is sent. 
Therefore, perfect secrecy is achieved. By time-sharing between these two corner points, 
perfect secrecy can be achieved for the entire region, which is the best rate-equivocation 
region that can be achieved. Hence we obtain the capacity-equivocation region (jlip . 

Remark 5. The example channel given in fjlO|) is a nondegraded channel. We hence obtain 
the capacity-equivocation region for a nondegraded channel. 

3.3 Proof of Theorem [2] 

In this section, we give a proof of the outer bound on the capacity-equivocation region in 
Theorem |21 The proof apphes the techniques in the proofs of the converse of the capacity- 
equivocation region of the broadcast channel with confidential messages in jHj and the con- 
verse of the capacity region of the MAC [T^, Chapter 14]. 

We consider a sequence of (^2"-^°, 2"-^^, n) codes for a GMAC with one confidential message 
set with pi"-* 0. Then the probability distribution on Wq xWi x x 3^" x is 

given by 

p(w;o,wi,a;^,x^,l/",?/^) 

n 

= p{Wo)p{Wi)p{x1\Wo, Wi)p{x2\Wo) YlviVU y2,i\Xl,i, X2,i) 

1=1 

By Fano's Inequality, we have 

H{Wo, W^ilF") < n{Ro + Ri)P^''^ + 1 := n6n 
where ^ if P]"^ 0. 

We first give a lemma that is useful in the following proof. 
Lemma 1. ^ Lemma 7] 

n n 
i=l 1=1 

We define the following auxiliary random variables. 

Qr.= {Y^-\Y,^.^„x^,Wo), Ur.= m,Q,), Vr.= iY'-\XlWo) (15) 
Note that these auxiliary random variables satisfy the following Markov chain conditions: 

X2,i ^ Qi Ui Xi^i, 

V,^Q,^{U,,X^,,X2,) (16) 
(V^„Q„a,) ^ (Xi,„X2,.) ^ {Y,,Y2,^) 
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(13) 



(14) 



We first consider 

= H{W^\X1^, Wo) - I{W^, Y^^\X^, Wo) 

= I{W,; Y^\X^, Wo) - /(H^i; ^21^2^, Wo) + X^", Wo) 

(a) " 

< I{Wi- Y,\Y'-\ XI Wo) - I{Wu l2,|lX.+i, XI Wo) + n6n 

i=l 
n 

= HWi^ y2%i; nY'^-\Xl Wo) - nY'-\ X^, Wo, W,) 

i=l 

- I{W,, Y^'^- r2,|>Xm, ^2 , Wo) + I{Y'-^; r2,|F^,+i, Xl^, Wo^ W,) + n5„ 

n /T ^\ 



Y y,|y^-\ X2", Wo) - i{w,, r-^ y2.l>Tm, ^2", w^o) + 

i=l 

n 

i=l 

5^ I{W^■ nY-^-\ X2", W^o) - HW,- Y2,\Y'-\ Y.^^X^ Wo) + nd^ 

i=l 
n 



i=l 



In the preceding equation, (a) follows from the chain rule and Fano's inequality ()14|) . (b) and 
(c) follows from Lemma ^ and (d) follows from the definition for Qi and Ui in ()15|) . 

We also can write 

<i7(lVo) + i/(iyi|F2",^2",W^o) 

< I (Wo; F") + 11^2", ^2, Wo) + n5n 

n 

= J2 HWo; nY'-') + H{W,\Y^, XI Wo) + n5n 

i=l 

< Y ^(^"'' ^^.+1' ^2 , w^o; + ^(w^ll>^2^ ^2^ w^o) + ^^^^ 

i=l 

(6) 

< 5^ /(g„ X2,; y,) + /(f/,; F,|X2„ Qi) - I{Uf, F2,|X2,,, g,) + n5„ 

i=l 

n 

= J2 ^(^2„ g., y,) - /(f/,; r2,i|X2„ g,) + nS^ 

i=l 

In the preceding equation, (a) follows from the chain rule and nonnegativity of mutual 
information, and (6) follows from the definition for Qi in (fT^ and the bound (fTTj) . 
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We further have 

nRi = H{Wi) < I{Wi; F") + n6n < I{Wi; F^lW^o) + n6n 
= H{Wi\Wo) - Wo) + n6n 

< H{W,\Wo, X^) - H{Wi\Y\ Wo, X^) + nSn 
= IiWuY''\Wo,X^)+n5n 

n 

= J2 HWi; nY'-\ Wo, X^) + nSr, (19) 



n 



< 



I{y''\ X^, Wo, Wi; nY'-\ X^, Wo) + nSn 



i=l 



J2HUunX2„V^+n6n 



1=1 



where (a) follows from the fact that Wi is independent of {Wq,X2) and conditioning does 
not increase entropy. 

Finally, we have 

nRo + nRi = H{Wo, Wi) < I{Wo, Wr, F") + nSn 

n 

= Y,KWo,WuY.^Y'-^) +n5n 
1=1 

{«) A -1 (20) 
<Y,Hy'~\y2,+i,X'2,Wo,W,;Yi)+n6n ^ ' 

i=l 



Yl{Ui,Q„X2xX)+n5„ 



1=1 



where (a) follows from the chain rule and nonnegativity of mutual information. Theorem |21 
then follows from standard single letter characterization (see e.g. |15j). 



4 Degraded GMAC with One Confidential Message 
Set 

In this section, we study the degraded GMAC with one confidential message set, where 
the output at user 2 is a degraded version of the output at the destination. This channel 
generalizes the wire-tap channel studied in |2I to allow user 1 and user 2 (wire-tapper) 
to jointly send common information to the destination. In the following, we first present 
the main results that characterize the capacity-equivocation region and the secrecy capacity 
region of the degraded channel, and provide the proof for the main results. We then illustrate 
our results via a binary example GMAC. 
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4.1 Main Results 



We first define two classes of degraded GMACs with one confidential message set in the 
following. 

Definition 5. The GMAC with one confidential message set is physically degraded if the 
transition probability distribution satisfies 



i.e., y2 is independent of Xi conditioned on y and X2. 

Definition 6. The GMAC with one confidential message set is stochastically degraded if its 
conditional marginal distribution is the same as that of a physically degraded GMAC, i.e., 
there exists a distribution p{y2\y,X2) such that 



We note the following useful lemma. 

Lemma 2. The capacity- equivocation region of GMACs with confidential messages depends 
only on the marginal channel transition probability distributions p{y\xi, X2), p{yi\xi, X2), and 
p{y2\xi,X2). 

Proof. It is clear that the decoding probability of error at the destination depends only on 
the probability distribution p{y\xi, X2), and so is the achievable rates {Rq, Ri, R2). Moreover, 
the equivocation rates Ri e and -R2,e depend only on the probability distributions X2) 
and p ( 2/2 1 a; 1 , 0:2 ) , resp ect ively. □ 

Based on Lemma |2l we have the following capacity-equivocation region for both physically 
and stochastically degraded GMACs with confidential messages. 

Theorem 4. For the degraded GMAC with one confidential message set, the capacity- 
equivocation region is given by 



p{y,y2\xi,X2) = p{y\xi,X2)p{y2\y,X2), 



(21) 




(22) 



y 



{Ro, Ri, Re) : 

^0 > 0, i?i > 0, 

R^<IiX^■,Y\X2,Q), 





< Ro + Ri<I{Xi,X2;Y), 

0<Re< Rl, 

Re < /(Xi; Y\X2, Q) - /(Xi; Y2\X2, Q), 
^ Ro + Re < I{X,,X2;Y) - I{X,;Y2\X2,Q) ^ 



> . 



(23) 



p{q,X2)p{xi\q) 
p{y\xi,X2)piy2\y,X2) 



where Q is bounded in cardinality by \ Q\ < \Xi\ ■ \X2 \ + 1. 
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The achievability is obtained by applying Theorem and setting [/ = Xi in Q. The proof 
of the converse is provided in the next subsection. 

Remark 6. The region can be shown to be convex (similar to the proof of Lemma 5 in 
J^), and hence does not need further convexification. 



The following results on the secrecy capacity region and secrecy capacity (as a function of 
i?o) follow from Theorem 0] 

Corollary 1. For the degraded GMAC with one confidential message set, the secrecy capacity 
region is given by 

( {Ro,Ri): ] 
Cs= U < Ri<I{Xi;Y\X2,Q)-I{Xi;Y2\X2,Q), \. (24) 

p{q,X2)p{xi\q) [ Ro + Ri < H^i,^2;y) - HXi;Y2\X2,Q) J 

Piy\xi,x2)piy2\y,x2) 



The secrecy capacity as a function of Rq is given by 

Cs{Ro) = maxmin{/(Xi; Y\X2, Q) - I{Xv, Q), 

/(Xi, X2; r) - /(Xi; r2|X2, g) - i?o} 

where the maximum is taken over all joint distributions p{q:X2)p{xi\q)p{y\xi,X2)p{y2\y-,X2)- 
In both ()24|) and ()25|). Q is bounded in cardinality 6?/ | Q| < |^i| ■ |^2| + 1- 

Remark 7. If Rq = and X2 := 0, the degraded GMAC with one confidential message set 
reduces to the wire-tap channel studied in 0. For this channel, the secrecy capacity in 
reduces to 

Cs = max[/(Xi; Y) - I{X,- Y2)] (26) 

where the max is taken over all joint distribution p{xi)p{y\xi)p{y2\y) ■ This is consistent with 
the secrecy capacity given in ^2] with a different form, because the problem in ^2] is formulated 
as a source-channel problem. The secrecy capacity in ()26|) is also consistent with the secrecy 
capacity of the less noisy channel given in Theorem 3], because degraded channels belong 
to the class of less noisy channels '^ISL 



4.2 Proof of the Converse for Theorem |4l 



For the general discrete memoryless GMAC with one confidential message set, we give a 
proof of the outer bound on the capacity-equivocation region in Section 13 .31 This outer 
bound provides only a partial converse. In this section, we apply the degradedness condition 
and prove a tight converse to the capacity-equivocation region for the degraded GMAC with 
one confidential message set. 
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Our proof applies the techniques in the converse proofs for the wire-tap channel in [2j and 
for the MAC in ^ Chapter 14]. 

We consider a sequence of (2^^° , 2'""^^ , n) codes for the GMAC with one confidential mes- 
sage set with pi"-* — >• 0. Then the probability distribution on WqxWiX x x x 
is given by 



p(u7o,^^i,a;i,x^,?/",2/^) 

n 

= p{Wo)p{Wi)p{x'l\Wo, Wi)p{x2\Wo) YlpiVi, 2/2,*kl,i, X2,i) 



i=l 

n 



(27) 



p{wo)p{wi)p{xl\wo,wi)p{xl\wo) Wp{yi\xi^i,X2,i)p{y2Ayi,X2,i) 



i=l 



By Fano's inequality, we have 

H{Wo, Wi\Y^) < n{Ro + i?i)Pi") + 1 := n5„ (28) 

where 5„ ^ if Pi"^ 0. 
we define the following auxiliary random variable: 

Qr.= {Y'~\XlWo). (29) 

Note that X2^i Qi ^ and Qi {Xi^i,X2^i) {Yi,Y2^i) form Markov chains. 

We first consider 

nR,,, = H{Wi\Y2\XlWo) 

= H{Wi\Y2^, X^, Wo) - H{Wi\Y2^, XI Wo, F") + if(lVi|lT, X^ Wo, F") 

< I{Wi;Y'AY2^,XlWo) + n6n 

< IiWi,X^; F"|F2", XI Wo) + n5n 

= /(Xf; Y^\Y^, X2", Wo) + I{Wv, Y^Y:^, X^, Xl^, Wo) + n<5„ 
^^I{X^-Y''\Y^,Xl^,Wo) + n5n 

= H{X^\Y^, XI, Wo) - //(Xr XI, Wo) + n5„ 

//(Xr IK,", Wo) - E{Xl\Y^, X2", Wo) + nbn 
= /(Xf; Y^Xl Wo) - /(Xf; Y2AXI Wo) + n5n 

where (a) follows from Fano's inequality, (6) follows from the fact that K" is independent 
of VFo; W^i given Y2,X'^,X2, and (c) follows from the degradedness condition, i.e., Y2 is 
independent of X^, Wo given F", Xg . 
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We proceed to bound nRi^e and obtain 

n 

nRi,e < J2 ^(^i"' X^, Wo) - /(Xf ; Y2,\Y^-\ X^, Wo) + nSn 

1=1 

n 

= Y,H{nY'-\XlWo) - H{nY'~\X'^,X^,Wo) 

i=l 

- H{Y2,^\Yt\XlWo) - H{Y2,,\Y^-\X'^,XlWo) +n6n 

(d) " 

< J2H{nY^-\X^,Wo)-H{Y,\Y'-\X,,,X^,Wo) 
1=1 

- HiY2,i\Y'-\ Y^-\X^, Wo) + HiY2,\Y'-\X,„ X^ Wo) + 
Y,H{nY^^\XlWo) - H{Y,\Y'-\X^^i,XlWo) 

H{Y2,\Y'-\X^,Wo) + H{Y2,\Y'-\X,„XlWo) +n6n 
^ H{Y,\Q,, X2,) - H{Y,\Q,, X2,, Xi,) 

- H{Y2,^\Q^,X2,^) + H{Y2,i\Q.,X2,^,X,,,) +n6n 

n 



(30) 



i=l 

n 

(/) 

i=l 



i=l 



In the preceding equation, the second term of {d) follows from the fact that Yi is independent 
of everything else given Xi j and X2_j; the third term of {d) follows from the fact that 
conditioning does not increase entropy, and the fourth term of {d) follows from the fact that 
l2,i is independent of everything else given Xi^j and X2,i. In (e), the third term follows from 
the degraded condition, i.e., Fg"^ is independent of everything else given F*~\X2~^. The 
step (/) follows from the definition of Qi given in ()29|) . 



(a) 

nRo + = H{Wo) + ni?i,e < I{Wo] F") + ni?i,e + n5n 



= J2 liWo; nY'-') + nR,,, + n6^ 

i=l 
(6) " 

< J2 Hy''\Xl Wo; Yi) + nR,,e + nS, 



i=l 
n 



(31) 



< J2HX2,^,Q^■,Yi) + I{XiX,Yi\Qi,X2,i) - I{XiX,Y2,.U,X2,i) +n5n 
i=l 



J2 HXl,^, X2,.; Yi) - /(Xi,,; Y2,^U, X2,^) + nS„ 



(d) 

i=l 

where (a) follows from Fano's inequality, (6) follows from the chain rule and nonnegativity 
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of mutual information, (c) follows from the inequality (|3U|). and (d) used the Markov chain 
condition Qi (Xi_j,X2,i) (Fi,F2,i)- 

The next two inequalities follow the converse proof for the MAC in . For completeness, 
we include those steps here. 

nRi < I{Wi;Y''\Wo,X^) +n6n 

<IiX^,Wv,Y''\Wo,X^)+n6n 

= IiX'^;Y^\Wo,X^) + I{W,;Y^\Wo,XlX'^) + n5n 

<I{X^;Y^\Wo,X^) + n6n 

n 

i=l 
n 

= J2h{Y,\Y''-\XIWo) ~ H{Y,\Y'-\XlWo,X^^) +n6n 
1=1 

n 

< H{Y,\Y'-\ XI Wo) - H{Y,\Y'-\ X^ Wo, Xi,,) + n6n 
1=1 

n 

= J2 H{nX2„ Qd - H{Y,\X2„ Q„ Xi,) + n6^ 

i=l 

n 

= Y HXi,i] Yi\X2,i, Qi) + ndn 



(32) 



i=l 



where (a) follows from the partial step in ()19|) . and (6) follows from the Markov chain 
condition {Wo, Wi) ^ (Xi,„X2,.) ^ Y^. 



nRo + nRi < I{Wo, Wv, F") + n5n 

n 

= Yl(Wo,Wv,Y,\Y'-^)+n5r. 
1=1 

n 

< y2H{Y,\Y'-') - H{Y,\Y'-\Wo,W,,X2,^,X,,,) +nSn 

tr (33) 

n 



< Y H{Yi) - H{Yi\X2,^, Xi,) + nSr. 

i=l 
n 

= J2HXl,^,X2,^■,Yi)+n6^. 



i=l 



The converse for Theorem |^ then follows by standard single letter characterization (see 
e.g. tlSj). 
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4.3 A Binary GMAC with One Confidential Message Set 



In this section, we study a binary GMAC with one confidential message set, which is a 
degraded channel. We first follow ^H] to introduce notation and useful lemmas for binary 
channels. We then introduce the binary GMAC model we study and present the capacity- 
equivocation region for this channel. 

We first define the following operation: 

a*b:= a{l-b) + {1- a)b forO<a,6<l. (34) 

We then define the entropy function 

/^C^^ (1 -a)log(l -a), if < a < 1; 

' \o, if a = or 1. ^ ^ 

The function h{a) is one-to-one for < a < 1/2. The inverse of the entropy function is 
limited to h'^c) G [0,1/2]. 

Lemma 3. ^19] The function f{u) = h{p * h~^{u)), < n < 1 (where p G (0, 1/2] is a fixed 
parameter) is strictly convex in u. 



The following useful lemma is a binary version of the entropy power inequality. 

Lemma 4. '^191 Consider two binary random vectors X" and Y^. Let H{X^) > nv. Let 

Yi = Xi®Z, fori = l,...,n (36) 

where is a binary random vector with i.i.d. components and Zi has distribution Pr{Zi = 
1) = Po where < po < 1/2. The vectors X" and can be viewed as inputs and outputs of 
a binary symmetric channel (BSC) with crossover probability pq. Then, 

H{Y'')>nh{po*h-\v)) (37) 

with equality if and only if X" has independent components, and H{Xi) = v for i = 
1,2,. 



We now introduce the binary GMAC model of interest. We assume all channel inputs 
and outputs have the binary alphabet set {0, 1}. We assume that the channel is discrete 
memoryless and the input-output relationship at each time instant satisfies 

= Xi,i ■ X2,i, Y2,i = Y,®Z2,i hrt = l,...,n (38) 

where Z2 is a binary random vector with i.i.d. components and Z2^i has distribution Pr{Z2^i = 
1) = p where < p < 1/2. We illustrate the channel input-output relationship in Fig. 0] 
Note that the MAC channel from {Xi,X2) to F is a binary multiplier channel. It is clear 
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Xi X2 Y Y2 




Figure 4: A degraded binary example GMAC 



that this GMAC channel is degraded, and the channel outputs Y and Y2 can be viewed as 
the input and output of a discrete memoryless BSC with crossover probability p. 

We have the following theorem on the capacity-equivocation region of the binary example 
GMAC with one confidential message set. 

Theorem 5. For the binary GMAC with one confidential message set given in ()H8j) . the 
capacity- equivocation region is given by 

(i?o, -Ri, -Re) : 
^0 >0,Ri> 0, 
Ri < h{a), 
Rq + Ri < 1, 
0<Re< Ru 

Re < h{a) + h{p) — h{p * a), 

Ro + Re<i + Hp) - Hp * «) 

Corollary 2. The secrecy capacity region of the binary GMAC with one confidential message 
given in (|38p is 

{Ro,Ri) ■ 
_ II J -Ro > 0, i?i > 1, 

Ri < ^(a) + Hp) ~ Hp * 0^)5 
^0 + ^1 < 1 + Hp) - Hp * ") 



B 



U 



0<a<J 



> . 



(39) 



C 



u 



(40) 



0<a<7 



The secrecy capacity as a function of Rq is given by 

cf (i?o) = /i(a*) + Hp) - Hp * 

where a* is determined by the following equation 

Ro = l- h{a*). 



(41) 



(42) 



Remark 8. The BSC crossover probability parameter p determines how noisy the channel 
from user 1 to user 2 is compared to the channel from user 1 to the destination. When p = 0, 
user 2 has the same channel from user 1 as the destination, and hence no secrecy can be 
achieved. As p increases, user 2 has a noisier channel from user 1 than the destination, and 
hence higher secrecy can be achieved. As p = |, user 2 is totally confused by confidential 
messages sent by user 1, and perfect secrecy is achieved. 
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Ro (bps/Hz) 



Figure 5: Secrecy capacity regions of the binary GMAC with one confidential message set 

Fig. El plots the secrecy capacity as a function of Rq for four values of p. These lines of 
C^{Ro) also serves as boundaries of the secrecy capacity regions for the binary channel we 
study with the vertical axis being viewed as Ri. It is clear from Fig.Elthat as p increases, the 
secrecy capacity region enlarges, because user 2 is further confused by confidential messages 
sent by user 1. 

Remark 9. From the achiev ability proof of Theorem\^ (given in Section \4~4\ ), it can be seen 
that the optimal scheme to achieve the secrecy capacity region uses superposition encoding. 
To achieve the secrecy capacity corresponding to different values of Rq, different values of 
the superposition parameter a needs to be chosen to generate the codebook. However, if the 
secrecy constraint is not considered, the capacity region of the binary multiplier MAC can be 
achieved by a time sharing scheme and superposition encoding is not necessary. 

Fig. El plots the secrecy capacity as a function of Rq (indicated by the solid line) and 
compares it with the secrecy rate achieved by the time sharing scheme (indicated by the 
dashed line). The figure demonstrates that the time sharing scheme is strictly suboptimal 
to provide the secrecy capacity region. As we commented in Remark El although the time 
sharing scheme is optimal to achieve the capacity region of the binary multiplier MAC, it 
is not optimal to achieve the secrecy capacity region of the binary GMAC, as secrecy is 
considered performance criterion. 
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0.5 




Figure 6: Comparison of secrecy capacity region and secrecy rate region achieved by time 
sharing scheme for the binary example GMAC with one confidential message set 



4.4 Proof of Theorem [S] 

Proof of the Achievability. We apply Theorem 0] to prove that the capacity-equivocation 
region is achievable. Let Q and X' be two binary random variables with alphabet 
{0, 1}, and assume that Q is independent of X'. We choose the following joint distribution: 

Pr{Q = 0} = l pr{x'=l} = a, < a < 1; ^^^^ 

Pr{X2 = 1} = 1; Xi = g © X'. 

We now compute the mutual information terms in the achievable region given in Theorem 
m based on the preceding joint distribution. 

R, < I{X,;Y\X2,Q) = H{Y\X2,Q) 

= Pr{Q = 0}HiY\X2 = 1, g = 0) + Pr{Q = 1}H{Y\X2 = 1,Q = 1) 
= h{a) 

Ro + Ri< /(Xi, X2; Y) = H{Y) = 1 



21 



< J(Xi; F|X2, Q) - /(Xi; Y^lX^, Q) 

= h{a) - iH{Y2\X2,Q)-H{Y2\Xi,X2)) 

= h{a) - [Pr{Q = 0}HiY2\X2 = 1,Q = 0) + Pr{Q = 1}H{Y2\X2 = l,Q = l) 
- Pr{Xi = 0}H(Y2\X2 = = 0) - Pr{Xi = 1}H{Y2\X2 = l,Xi = 1)] 
= h{a) — [h{a * p) — h{p)] 
= h{a) + h{p) — h{a * p) 
Ro + Ri< /(Xi, X2; Y) - /(Xi; F2IX2, Q) = 1 - [h{a * p) - h{p)] 
= 1 + h{p) — h{a * p) 

□ 

Proof of the Converse. We apply the converse bounds obtained in Section 14.21 and further 
derive these bounds for the example binary GMAC 



From the first step in ()32|) . we obtain 

nRi < /(Xi"; y"|X2", Wo) + nd^ = H{Y''\X1^, Wq) + n5„ (44) 

where we have used the deterministic property of the GMAC, which implies //(F^IX", Xg , Wq) 
0. 

Since {y^, 1 <i <n] are binary random variables, H{Yi) < 1 for 1 < i < n. Hence 

n 

< /f(F"|X2", Wo) < J2 ^(^*) ^ ^- (45) 

It is clear that there exists a parameter a E [0, 1/2] such that 

/7(F"|X2", Wo) = nh{a). (46) 
Substituting the preceding equation into (jUj), we obtain 

nRi < nh{a) + n6n. (47) 



From ()33p . we obtain 

n/?o + ni?i < I{Wo, Wi- F") + n5n < HiY"") + n5n 
< n + n5n- 



(4J 



From ()3Up . we obtain 

ni?i,e < /(Xf; F"|X2^ W^o) - /(Xf; Fsl^a , Wo) + n5„ 

= i/(yiX2", Wo) - H{Y,^\X^, Wo) + HiY,^\X^, X^, Wo) + nS^ 

nh{a) - H{Y^\X'!^, Wo) + i/(lT|r", X^", X2", Wo) + n5n (49) 

n/i(a) - H{Y^\Xli, Wo) + //(1TI>^") + nd^ 
= nh{a) - H{Y^\X^, Wo) + nh{p) + n5„ 
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In the preceding bound, the first term in (a) follows from (j46j) . the third term in (a) follows 
from the fact that y" is a deterministic function of (X",X^), and the third term in (6) 
follows from the fact that is conditionally independent of everything else given Yn- 

Since in (|nHj) is independent of W^Xg and F", we apply Lemma El to bound the term 
H{Y,-\X^,Wo). 



H{Y,^\Xl Wo) = EH{Y^^\X^ = Wo = wo) 



(a) 

> E 



f HiY^' 
nh[p* h"^ I 



\Xl^ = x^^,Wo = Wo) 
n 



n 



nh \ p * h 



-1 



\XS, Wo] 



nh ^ * h 
nh{p * a) 



\ n 
_^ f nh{a) 



(50) 



n 



where (a) follows from Lemma EJ (6) follows from Lemma Inland Jensen's inequality, and (c) 
follows from 



Substituting (I^U)) into (jl^ . we obtain 

nRi^e < nh{a) + nh{p) — n/i(p * a) + n5„ 



(51) 



From (j!?T|l . we obtain 

(a) 



(52) 



< J(H^o, X2"; y") + /(Xf; y"|X2", W^o) - /(Xf; F^l^a , W^o) + n6n 
= nWo, Xf, X2"; F") - /(Xr; ^21^2, W^o) + nS^ 
= H{Y^) - /(Xf; r^lX^", W^o) + n5„ 

< n + nh{p) — nh{p * a) + n5„ 

where (a) follows from (jSDI), (&) follows from the chain rule and nonnegativity of mutual 
information, and (c) follows from partial results in deriving Ri^e- D 



5 Gaussian GMAC with One Confidential Message Set 

In this section, we study the Gaussian GMAC with one confidential message set, where the 
channel outputs at the destination and user 2 are corrupted by additive Gaussian noise terms. 



23 



(53) 



We assume that the channel is discrete and memoryless, and that the channel input-output 
relationship at each time instant is given by 

= + X2^i + Zi 

where and Z2 are independent zero mean Gaussian random vectors with i.i.d. compo- 
nents. We assume that Zi and Z2/1 have variances and N21 respectively, where N < N2. 
The channel input sequences X" and are subject to the average power constraints Pi 
and P2, respectively, i.e.. 



1 " 

i=l 



and 



1 " 

i=l 



< P9 



(54) 



The following theorem states the capacity-equivocation region for the Gaussian GMAC 
with one confidential message set. 

Theorem 6. For the Gaussian GMAC with one confidential message set given in (j53p . the 
capacity- equivocation region is given by 

{Rq, Ri, Re) : 
R« >0,Ri> 0, 

aPi 



•G 



U 

0<o<l 



Ro + Ri<-\og[l 

0<Re< Rl, 



P1 + P2 + 2v^iy^ 



N 



) (55) 



Re<\ 



1 + 



aPi 

w 



log U + 



aPi 



Ro + Re<^log(l + 



P1 + P2 + 2^/M\P^ 
N 



- log U + 



aPi 



where a = 1 — a indicating the correlation between the inputs from users 1 and 2. 

Corollary 3. The secrecy capacity region of the Gaussian GMAG with one confidential 
message set given in ()53|) is 

{Ro, Rl) '■ 



C 



G 



u 

0<a<l 



Ro >0,Ri> 0, 
i?i < ^logfl + 



aPi 
1^ 



aPi 



.1, f, , P1 + P2 + 2VMW2 
Ro + Rl < -\og \1 + — 



log 1 + 



aPi 
A^ 



(56) 



The secrecy capacity as a function of Rq is 



C?{Ro) 



log 1 + 



2log( 1 + 



N 
a*Pi 

N 



-^log( 1 



N2 



-^^og(l 



a*Pi 



^/i?o<^log ^^^^ 

it Rn > - log 

^ " 2 ^ Pi + N 



(57) 
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Figure 7: Secrecy capacity regions of Gaussian GMACs with one confidential message set 
and capacity region of corresponding Gaussian MAC 



where a* is determined by the following equation 

" 2 ^ a*Pi + N ^ ' 

Fig.Elplots the secrecy capacity Cf^Ro) of Gaussian GMACs with one confidential message 
set for three user 1-to-user 2 SNR values. The lines of (i?o) also serve as boundaries of the 
secrecy capacity regions if we view the vertical axis as Ri. It can be seen that as user 1-to- 
user 2 SNR decreases, which implies that the noise level at user 2 increases, user 2 gets more 
confused by confidential messages sent by user 1. Thus the secrecy capacity region enlarges. 
As this SNR approaches zero, the secrecy capacity region approaches the entire capacity 
region of the Gaussian MAC, which means that perfect secrecy is achieved for almost all 
points in the capacity region of the MAC. 



5.1 Proof of Theorem [SI 



To show Theorem El we first note that the Gaussian GMAC defined in is not physically 
degraded according to Definition El However, it is stochastically degraded according to 
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Definitionini because the marginal distribution p(?/2|a^i, ^2) is the same as that of the following 
physically degraded Gaussian GMAC: 

Yj = X-\ -|- X'y j -\- 

(59) 

^2,1 — + -^2,j + + 

where Z"^ is the same as in The random vector Z'" is independent of Z", and has 

i.i.d. components with each component having the distribution A/'(0, ~ N). According to 
Lemma 121 it is sufficient to prove Theorem IHl for the physically degraded Gaussian GMAC 
defined in (jKHjl . 

Proof of the Achievability. The achievability follows by computing the mutual information 
terms in Theorem 0] with the following joint distribution: 

Q = 0, X2~Ar(0,P2) 



X[ ~ A/'(0, aPi), and X[ is independent of X2 



(60) 



□ 



Proof of the Converse. We apply the converse proof for the general degraded GMAC in 
Section 1121 and further derive these bounds for the degraded Gaussian GMAC. 



From (jg2|) . we obtain 

n 

nRi < J2 Y,\X2,i, Qi) + ndn 

1=1 

n 

= J2 h{y^\X2,^, Qi) - h{Y,\Xi,,, g.) + n6n 

i=l 
n 

= ^h(Yi\X2,i,Qi) - h{Zi\Xi^i,X2,i,Qi) +n5n 

i=l 

n ^ 

= J2 h{yi\X2,i, Qi) - 2 log27reAr + nSn 
1=1 

For the first term in the preceding inequality, we have 

n n n 

h{Yi\X2^i, Qi) = h{Xi i + X2^i + Zi\X2^i, Qi) = h{Xi i + Zi\X2A, Qi 

1=1 1=1 1=1 

n "1 

< J2 KXi, + Z,)<Y,l^ log27re(EXj, + N) 

(a) 



(61) 



2 

i=l i=l 



(62) 



< -log27re(-^EXj, + Arj < - log27re(Pi + AT) 
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where (a) follows from Jensen's inequality. 
On the other hand, 



J2 h{nX2,, Qi) > J2 + X2, + Zi\Xi,, X2,i, Qi) = ^ log 2neN . 

1=1 1=1 



Combining (jU^ and (jU^ . we establish that there exists some a G [0, 1] such that 

n 

Y,Hy^\X2,i,Q^) = ^log27re(aPi + iV) . 



We hence obtain the bound for Ri 



nRi < - log 27re(aPi + A^) - - log 27TeN + n6n 



For the term ^^^^ h{Yi\X2^i^ Qi), we also derive the following bound: 

n 

J]/i(r,|X2„g.) 

i=l 

n 

= Y,KXl,^ + Z,\X2,i,Qi) 
i=l 

n ^ 

< 5ZEx,,„Q.-log27reVar(Xi,, + Z^lX^^uQi) 

i=l 
{"■) ^ 1 

< J] - log27reEx2,„Q,Var(Xi,i + Z,\X2,^, Qi) 

i=l 

= J2l^og2ne {Ex,,,Qyar{X^,\X2,,Qi)+N) 

i=l 

= ^log2vre (E(XJ,) - Ex,„q,E2(Xi,|X2„ Q.) + N) 

i=l 

< ^log27re i-J2ml) - -Ex,,^,Q.E\X,,i\X2,i,Q^)+N 

< ^ log27re (p, - iEx,,,Q,E2(Xi,|X2„ Q.) + X 
where (a) and (b) follows from Jensen's inequality. 
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Using (jnH), we have 



«Pi + AT < Pi - -Ex,,„q,e2(Xi,,|X2,„ g.) + N 



From (pHj). we obtain 



nPo + '^-Ri < ^ X2/, Yi) + nSn 

1=1 

n 

= Y,H{Yi) - I{Y,\X,,i,X2,i) + n5n 

i=l 
n 

= ^/7(F,)-^log27reiV + n<5„ 



i=l 



For the first term in the preceding inequahty, we obtain 

n n 

1=1 i=l 
n 

<Y.2 (^^^^'^ + + ^) 

i=l 

< ^log27reU5^E(Xi,, + X2,)=^ + ivj 

\ E + ^ E + ^ E 2E(X,.X,,) + AT 

i=\ 1=1 i=l / 

< ^ log 27re + ^2 + ^ 2E(Xi,,X2,.) + iV j 

< ^log27re ||pi + P2 + i^2Ex,,„Q,(X2,E(Xi,|X2,,„Q,)) 

< ^ log 27re I^Pi + P2 + ^ ^ ^]^x,,.,Q.Xl^ " Ex,„q.E2(Xi,|X2„ Q.) + iV 

n / 

< -log27re( P1 + P2 



+ 2 



< I log 27re (Pi + P2 + 2^aPiP2 + iv] 
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log IH TT + ndn 



In the preceding bound, (a) follows from Jensen's inequality, (6) and (c) follows from Cauchy- 
Schwarz inequality, and {d) follows from (|U7|). 

Hence, 

nRo + nRi<- log 27re i^Pi + P2 + 2^aPiP2 + ^ j " 2 2vreAr + 
^1 A , A + P2 + ^ 

From (j3Up . we obtain 

n 

nRi,e < /(Xi,,; Y,\X2,u Q^) - I{XiX, Y2,^X2,u Qi) + n5n 
=1 

1 + V ) " 5Z ^(^2,1X2,,, Q,) + ^ log27reiV2 + 



n 
2 



(71) 



To bound the term Yll=i ^(^2,j|-^2,j, Qi) in (f7T|) . we first derive the following bound. Since 
Z[ is independent of Yi given X2^i and Qi, by entropy power inequality, we obtain 

_ 2'^h{yi\X2,i=x2a,Qi=g^) _|_ 27re(A^2 — ^) 

We then obtain 

h{Y, + Zl\X2, = X2„ Q^ = q^)>l log (22'^(^'l^2>»=-2-«»=''') + 27re(iV2 - iV)) 
Taking the expectation on both sides of the preceding equation, we obtain 

Eh{Y, + Zl\X2,^ = X2,i, = q^) > log (22M^d^2.=x2.,Q,=.,) + 27re(iV2 - N)) 

(a) 1 

> - log (22E'^('^'1^2,,=x2,„Q.=g.) ^ 27re(Ar2 - N)) 

= i log (22My.l^2.,Q0 + 27re(iV2 - iV)) 

where (a) follows from Jensen's inequality and the fact that log(2^' + c) is a convex function. 
Summing over the index i, the preceding inequality becomes 

n 1 " 

J2 h{Y, + Z:\X2,, Qi)>-Y^ log + 27re(iV2 - N)) 

i=l 1=1 



(a) 
> 

(b) n 



> ^log (^22^S"^i^(^»l^2.>'«-) + 27re(iV2 - iV) 
log (27re(aPi + iV) + 27re(iV2 - A^)) 



2 

77 

-log(27re(aPi + iV2)) 
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where (a) follows from Jensen's inequality, and (b) follows from (j67|) . 
Applying the preceding bound to the term J2^=i ^(^2,j|-^2,i5 Qi), "we obtain 

n n 

J2 ^(^2,1X2,, Q,) = 5^ h{Y, + Zl\X2„ Qi) > ^ log (27re(aPi + A^s)) (72) 
i=i 1=1 

Substituting the preceding bound into (f7T|) . we obtain 

riPi,e < - log f 1 + ^ j - - log (27re(aPi + A^s)) + - log 27reAr2 + n5n 
^n, / aPA n ^ / aPi\ ^ 

From (j3ip . we obtain 

n 

< J2 ^(^1,^' ^2,^; - /(Xi,,; ¥2^X2,1, Qi) + n5„ 



(73) 



i=l 



< - log 1 + 



2 1 ^ ^ ]y 1 - X] ^(>2,i|^2,i, Qi) + ^ log27reA/'2 + n5n ^^^^^ 

1=1 



< ^ log (1 + ^^±^±^v^^ _ ^ log (2vre(aP, + AT^)) + | log 2vreAr2 + n^. 



< 2 log ^1 + ) - 2 l°g(l + ^) + 

which completes the proof. □ 



6 GMAC with Two Confidential Message Sets 

In this section, we consider the general case of the GMAC with (two) confidential mes- 
sages, where the two users have common messages and each user has private (confidential) 
messages intended for the destination. Each user wants to keep the other user as ignorant 
of its confidential messages as possible. For this case, the rate-equivocation tuple has five 
components and takes the form {Rq, Pi, P25 Ri,e, R2,e), where Pi e and P2,e are equivocation 
rates indicating the secrecy levels of confidential messages sent by user 1 and confidential 
messages sent by user 2, respectively. 

In the following, we first provide our main results on the achievable rate-equivocation 
region and secrecy rate region. It can be seen that the rate-equivocation region has a more 
complicated form compared to that of the case with a single confidential message set, and 
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carries a new feature of the trade-off between the secrecy levels that can be achieved for 
the two confidential message sets. We then give an intuitive interpretation of the rate- 
equivocation region, following which we provide a rigorous proof of the rate-equivocation 
region. Finally, we give an equivalence proof of two regions, which simplifies the rate- 
equivocation region to an explicit form. 



6.1 Main Results 



The following theorem provides an inner bound on the capacity-equivocation region for the 
GMAC with two confidential message sets. 

Theorem 7. The following convexified region of nonnegative rate- equivocation tuples is 
achievable for the GMAC with two confidential message sets: 

{Rq, Rl, R2, Rl^e, R2,e) '■ 

Ro >0,Ri> 0, R2 > 0, 
Ri<IiU;Y\V,Q), 
Convex |J <^ R2 < I{V;Y\U,Q), >. 

p{q)p{u\q)p{xi\u) Ri + R2< I{U, V- Y\Q), 
p\v\q)p{x2\v) Ro + Ri + R2 < I{U, V, Q; Y), 

P{y,yi,y2\Xl,X2) I {Rl,e,R2,e) ^ <Se{Ro,Rl,R2) 



■>II 



(75) 



where 



Se{Ro, Rl, R2] 



^ U 

{R'i,R'2) ■ 

{Rq, R'-i, R'2) G C^/Ac 

Rl < i?^ , R2 ^ R'2 



{Rq, Rl^e, R2,e) '■ 
< Rl,e < Rl 

Ri,e<[R'i-IiU;Y2\X2,V,Q)]+ 

< R2,e < R2 

R2,e < [R'2-I{V;Yi\Xi,U,Q)] + 



(76) 



where C\^j^(j is defined as 



'^MAC 



[Rq, Rl, R2) '■ 
Ro >0,Ri> 0, i?2 > 0, 
Ri<I{U;Y\V,Q), 
R2<I{V;Y\U,Q), 
Ri + R2< IiU,V;Y\Q), 
[ Ro + Ri + R2<I{U,V,Q-Y) J 



> . 



(77) 



An intuitive interpretation of the rate-equivocation region in Theorem [3 is given in the 
next subsection. The proof will be provided in Section 16.31 

Note that the region Se{Ro, Ri, R2) contains the secrecy rate pairs (-Ri,e, R2,e) that can be 
achieved for the given rate tuple [Rq, Ri, R2). It can be seen that Se{Ro, Ri, R2) in is 
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characterized by a union of a set of {R[, R2), which is not an exphcit form. It is thus desirable 
to change Se{Ro, Ri, R2) to an exphcit form that is characterized through inequahty bounds 
only. 

Theorem 8. The set Se{Ro, Ri, R2) in (ffH|l can he expressed in the following explicit form: 



Se{Ro, Rl, R2) = '2i(-Ro, -Rl, R2) U £.2iRo, Rl, R2) U 2jz{Ro, Ri, R2) 



where 



^i{Ro, Rl, R2) 

e, R2,e) '■ 
< Rl,e < Rl 
< R2,e < R2 

Ri,e < [liU- Y\V,Q)- I{U- F2IX2, V, Q)]+, 
Ri.e < [I{U, V; Y\Q) - i?2 - I{U; Y,\X2, V, Q)U, 
Ri.e < [I{U, V, Q; Y)-Ro-R2- I{U- Y^lX^, V, Q)] + 
R2,e < [I{V; Y\U, Q) - liV; Y^\X^, U, Q)]+, 
R2,e < [I{U, V; Y\Q) -Rl- I{V- Yi\Xi, U, Q)] + , 
R2,e < [I{U, V, Q- Y)-Ro-Ri- I{y- Yi\Xi, U, Q)]+ 
Ri,e + R2,e < [I{U, V- Y\Q) - I{U- F2IX2, V, Q) - I{y- FilXi, U, Q)]+, 
I Ri,e + R2,e < [I{U, V, Q; Y)-R,- I{U; Y^lX^, V, Q) - I{V; Y, \X,, U, Q)l 



£2(-Ro, -Rl, R2) — 



(-Rl.e, R2,e) '■ 
< i?i,e < Rl 

Ri,e < \l{U; Y\V, Q) - I{U- 1^21X2, V, Q)]+, 



Ri,e < [I{U, V- Y\Q) -R2- I{U; F2IX2, V, Q)] + , 
Ri,e < [I{U, V, Q; Y)-Ro-R2- HU; Y^\X^, V, Q)]. 



R 



2,e 







and 



^■a{Ro-, Rl, R2) 



{Rl,e, R2,e) '■ 

Rl,e = 0, 

< R2,e < R2 

R2,e < [I{V; Y\U, Q) - liy- Yi\Xi, U, Q)]+, 
R2,e < [I{U, V; Y\Q) -R,- I{V; Y^\X^, U, g)]+, 
R2,e < [I{U, V, Q; Y)-R,-R^- I{V; Y,\X,, U, Q)]_ 



(7J 



(79) 



(80) 



^1) 



The proof of Theorem |H1 is given in Section IFT^ 

Remark 10. The region (fTSj) reduces to the capacity region of the MAC by removing 
the secrecy constraints (Ri^e = 0, -R2,e = 0) o,nd setting U = Xi and V = X2. 

Remark 11. The last two bounds in ()79|1 indicate that there is a trade-off between the two 
equivocation rates Rie and R2e, i-^-, the secrecy levels achieved for the two confidential 
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message sets Wi and W2- It will be clear in Section WB that this trade-off can be achieved by 
using codebooks that achieve different boundary points of the MAC. It will be further clear in 
Section W^ that this trade-off corresponds to a trade-off between the sizes of the two codebooks 
used by the two users. 

Remark 12. The sets £,2{Ro, Ri, R2) and ^^{Ro, Ri, R2) characterize the equivocation rates 
when only user 1 or user 2 achieves nonzero equivocation rates. 



We now study the case where confidential messages of each user are perfectly hidden from 
the other user. This happens when i?i e = -Ri and i?2,e = Ri- The rate region that contains 
all these rate tuples is called the secrecy capacity region and is given by 

Cl^ = {{Ro, Ri, R2) ■ {Rq, Ri, R2, Ri, R2) £ ^^^}. (82) 



The following inner bound on the secrecy capacity region ^ follows from Theorem [3 and 
Theorem |H| 

Corollary 4. A secrecy rate region (inner bound on secrecy capacity region) for the GMAC 
with two confidential message sets is given by: 

7^f = Convex |J |7^,,l U 7^,,2 U 7^,,3} (83) 

p{q)p{u\q)p{xi\u) 
p{v\q)p{x2\v)p{y, yi, ?/2|a;i, X2) 

where 

(i?o, -Ri, -R2) : 
^0 > 0, i?i > 0, R2 > 0, 
^ _\ Ri<IiU;Y\V,Q)-IiU;Y2\V,X2,Q), I 

] R2<IiV;Y\U,Q)-IiV;Y^\U,X,,Q), ( ^^^^ 

Ri + R2< I{U, V- Y\Q) - I{U- Y2\V, X2, Q) - I{y- Filf/, Xi, Q), 
^ R^ + R^ + R2 < I{U,V,Q-Y) - I{U-Y2\V,X2,Q) - I{y-Y^\U,X^,Q) ^ 

{{Rq, Ri, R2) ■ 
Ro>0,Ri>0,R2 = 0, 
Ri < I{U- Y\V, Q) - I{U- Y2\V, X2, Q), 
Ro + Ri< I{U, V, Q; Y) - I{U- Y2\V, X2, Q) 

{(i?0, -Ri, R2) ■ 
Ro > 0, i?2 > 0, R, = 0, 
R2 < liV- Y\U, Q) - I{y- Flit/, Xi, Q), 
Ro + R2< I{U, V, Q- Y) - I{V- Fi|f/, Xi, Q) 





For the GMAC with two confidential message sets, it is desirable that both users achieve 
positive secrecy rates. We have the following sufficient condition for this case to happen. 
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Corollary 5. A sufficient condition for both users to have positive secrecy rates is that 

I{U- Y\V,Q)> I{U- Y^\X^, V, Q) (87) 

for some joint distribution p{q)p{u\q)p{xi\u)p{v\q)p{x2\v)p{y,yi,y2\xi,X2), and 

I{V; Y\U, Q) > I{V- FilXi, f/, Q) (88) 

for some joint distribution p{q)p{u\q)p{xi\u)p{y\q)p{x2\v)p{ii, yi, y2\xi,X2) ■ 

Note that the joint distributions that satisfy the two conditions (jSTjl and (j88|l are not 
necessarily the same. 

Proof. From (jHH|l . it is clear that if (fHTjl is satisfied, user 1 achieves positive secrecy rate (for 
Rq = 0). Similarly, from (jHUj) . user 2 achieves positive rate if ()88p is satisfied. Therefore, 
time-sharing between these two operating points guarantees positive secrecy rates for both 
users. □ 

In Fig. IHl we plot the secrecy rate region for the GMAC with two confidential message 
sets for a given distribution p{q)p{u\q)p{xi\u)p{v\q)p{x2\v)p{y,yi,y2\xi,X2). For the given 
joint distribution, we assume that both conditions in Corollary El are satisfied, i.e., both 
users have nonzero secrecy rates. Moreover, we assume that the bounds on the sum rate 
Ri + i?2 in (jH^ is positive, i.e., the region 7^^ i is nonempty. The geometric structure of 
the secrecy rate region (shaded area) falls into one of the four cases depending on how the 
mutual information terms compare with each other. In Fig.|Hlwe also plot the capacity of the 
corresponding MAC without secrecy constraints (setting Yi = (p and Y2 = 4> in the GMAC) 
with the outer solid line as the boundary. It is clear from the figure that the secrecy rate 
region is inside the capacity region of the corresponding MAC. Hence to achieve perfectly 
secure communication for confidential messages, the users need to transmit their confidential 
messages at smaller rates than reliable communication rates. It is also clear from Fig. |H1 that 
the secrecy rate region given by TZg^i U 7ls,2 U 7ls,3 is not convex in general and needs to be 
convexfied. These cases of secrecy regions will be further discussed in the next section and 
intuition behind the achievability of the corner points will be given. 



6.2 Interpretation of in Theorem [7] 

In this subsection, we explain the intuition behind the achievable rate-equivocation region 
J^^^ given in Theorem [7| A rigorous proof is relegated to the next subsection. 

We focus on the following region 3? given in Theorem [3 The region 3?^^ given in (ff5|) 
follows from ^ by prefixing two discrete memoryless channels with inputs U and V and 
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I ^ ^ ► Ri 

Case 1: I{V; Y\Q) > I{V; Yi\Xi, U, Q) and /([/; Y\Q) > I{U; ^21^2, V, Q) 




(a): before convexification (b): after convexification 

Case 3: I{V;Y\Q) > I{V;Yi\Xi,U,Q) and I{U;Y\Q) < I{U;Y2\X2,V,Q) 




BD BD 

(a): before convexification (b): after convexification 

Case 4: I{V;Y\Q) < I{V;Yi\Xi,U,Q) and I{U;Y\Q) < I{U;Y2\X2,V,Q) 

Figure 8: Secrecy rate region for the GMAC with two confidential message sets for a given 
joint distribution 
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transition probabilities p{xi\u) and p{x2\v) to the given GMAC (similar to [HI Lemma 4]). 



U 

p{q)pixi\q)p{x2\q) 

p{y,yi^y2\xi,x2) 



(i?0) Rl-i -Rl,e; R2,e) '■ 

Ri<I{X,;Y\X2,Q), 
R2<I{X2;Y\X,,Q), 
i?i + i?2</(Xi,X2;F|Q), 
R^ + R^ + R2^I{X^,X2■,Y), 

, {Rl,e, R2,e) £ Se{Ro, Rl, R2) 



where 



Se{Ro, Rl, R2) — [J 



where 



and 



(-Rl,e, R2,e) '■ 
< i?i,e < Rl 

Ri,e<[R[-I{Xi-Y2\X2,Q)]+ 

< i?2,e < R2 
{ R2,e<[R'2-I{X2\Y^\Xi,Q)]+ J 



A{Rq, Rl, R2) ■= {{R'i,R2) ■ (-Ro, -R'l, -R2) ^ ^MAC'-^l — -^15-^2 < -R2}) 



(i?0, -Rl, -R2) : 
Ri<I{Xi;Y\X2,Q), 
Cmac={ i?2</(X2;r|Xi,Q), 

/?i + i?2</(Xi,X2;F|Q), 
[ R, + Rr + R2<I{X^,X2-Y) J 



(89) 



(90) 



(91) 



(92) 



It is easy to see that the first four bounds in M in ()89|) are the bounds that define the 
capacity region of the MAC J3] . Hence these bounds also need to be satisfied for the GMAC 
with two confidential message sets. To understand the bounds on (-Ri,e, -R2,e), we plot Fig. IHl 
for illustration. In Fig. the solid line indicates the boundary of the region C^/^^* ^^^^ ^ 
given common rate Rq. 



For a given rate tuple {Rq, Ri, R2) that satisfies the first four bounds in (jSH)), which also 
means that {Rq, Ri, R2) G C^^,^, we plot the region A{Ro, Ri, R2) of {Rl^.R^) in Fig. 121 as 
the shaded area. It is clear that the rate tuple (i?o, Ri, R2) can be achieved by applying the 
codebook that achieves any rate tuples (i?o; R'li R'2) ^ -^{Rqi Rii R2) and throwing away the 
redundant bits R'^ — Ri and R^ — R2- However, it is a waste of channel resources to achieve 
a rate tuple with lower rate components by applying a codebook that achieves a rate tuple 
with higher rate components. 

The situation becomes different for channels with confidential message sets, where one user 
(say user 1) wants to keep its confidential information secret from the other user (user 2). 
Now to achieve a rate user 1 may transmit at a higher rate R'^ so that the codebook 
contains a larger number of codewords than the number of messages that user 1 wants to 
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i?2 




I ^ Ri 

Figure 9: Region C^fj^c ^ given common rate Rq 



convey to the destination. The redundant codewords are used to confuse user 2 about real 
messages that user 1 transmits to the destination. Since user 2 can decode at the rate of 
the capacity of the channel from user 1 to user 2, which is I{Xi] Y2\X2, Q), intuitively user 
1 can keep information with the rate R[ — I{Xi;Y2\X2,Q) secret from user 2. Similarly, 
user 2 can keep information with the rate i?2 — /(X2; Yi|Xi, Q) secret from user 1. Hence 
the equivocation rates Ri e = R'l — I{Xi; Y2\X2, Q) and i?2,e = R2 ~ ^ilXi, Q) can be 
achieved by the codebook achieving {Rq, R[, R2) for the MAC. We hence conclude that all 
equivocation rate pair (-Ri,e, -R2,e) in Se{Ro, Ri, R2) given in (jHIH) are achievable. 

Note that there is no loss of generality to consider only the rate tuples {Rq, R[, R2) G 
A{Ro, Ri, R2) that are on the sum rate boundary of the region Cp^^fj, i.e., the points on 
the line between the point A and point B in Fig. IHl This is because any point inside 
A{Ro, Ri, R2) corresponds to a point on the line from A to B that achieves larger Ri ^ and 
i?2,e- To operate at different points between A and B, user 1 and user 2 use different sizes of 
codebooks, and achieve different equivocation rate pairs (-Ri,e, R2,e)- As the operating point 
moves from A to B, the equivocation rate Ri^e increases and i?2,e decreases, thus achieving 
a trade-off between the security levels for the two confidential message sets sent by user 1 
and user 2 as commented in Remark ITTl 

Based on the preceding interpretation, we next give intuition for the secrecy rate region 
given in Corollary |3] In particular, we focus on the secrecy rate region of case 1 in Fig. |H1 
We plot this case in more detail in Fig. ^1 

We first consider case 1, where both of the following two conditions are satisfied: 

I{V;Y\Q)> I{V;Yi\Xi,U,Q) (93) 
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HU;Y\VQ) 
-I{U;Y2\VX2Q) 



Ri 



I{U;Y\VQ) 



Figure 10: Secrecy rate region of case 1: I{V;Y\Q) > I{V;Yi\Xi,U,Q) and I{U;Y\Q) > 
IiU;Y2\X2,V,Q) 



and 

IiU;Y\Q)> IiU;Y2\X2,V,Q) (94) 

so that the secrecy rate region is a pentagon. All rate tuples in the secrecy rate region can 
be achieved with confidential messages of the two users being perfectly secret from each 
other. However, to achieve perfect secrecy for rate tuples in the shaded area, the two users 
may need to use codebooks achieving rate tuples outside the shaded area with larger rate 
components. In this way, the size of the codebook used by each user is larger than the actual 
number of confidential messages that need to be delivered, and the redundant codewords in 
the codebook are used to confuse the other user. For example, consider the corner point A 
of the secrecy rate region in Fig. ^| The rates of the two confidential message sets are: 

Ra,i = I{U- Y\Q) - I{U- F2I V, X2, Q) (95) 



Ra,2 = liV- Y\U, Q) - I{y- Yr\U, X,, Q) (96) 

To achieve the point A with perfect secrecy, the actual codebook being used needs to operate 
at the point A' which is on the boundary of the capacity region of the MAC. The rates 
corresponding to A' are: 

Ra',i = I{U-Y\Q) (97) 
Ra',2 = I{V-Y\U,Q) (98) 
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If we compare the rate tuples corresponding to the points A and A', it is easy to see that the 
secrecy rates decrease from the actual rates of the codebook by the capacities of the channels 
between the two users, i.e., I{U;Y2\V,X2,Q) and I(y;Yi\U,Xi,Q). In fact, every point on 
the boundary of the secrecy rate region of case 1 in Fig. is achieved by the codebook that 
operates at a corresponding point on the boundary of the capacity region of the MAC. 

6.3 Proof of the Achievability of 1%^^ in Theorem [3 

In this section, we show that the rate-equivocation region 3?^^ given in Theorem is achiev- 
able. We first show that the region given in (|Hn|l is achievable. Then 3?^^ in Theorem 
[7| is achievable follows by prefixing two discrete memoryless channels as reasoned at the 
beginning of the preceding section. 

We present the proof in four steps. In Step 1, we prove existence of a certain codebook 
based on a random coding technique, which is different from the nonrandom code construc- 
tion used in jSj. Our random coding proof is also different from the proof in in that the 
codeword ensemble contains only typical sequences, which makes equivocation computation 
convenient. In Step 2, we define our encoding scheme. In Step 3, we compute the two equiv- 
ocation rates. The technique follows [SI Sec. IV]. In Step 4, we consider other cases where 
the encoding scheme is slightly different from the case considered in the preceding steps. 

Step 1: Existence of Certain Codebook 

We consider the following joint distribution 

PqxiX2Yy^Y2 = p{q)p{xi\q)p{x2\q)p{y, yi, 1/2^1, 2:2) 
We use T^{PqxiX2YYiY2) indicate the strong typical set defined by the distribution PqxiX2YYiY2- 

Consider a given rate triple {Rq, Ri, R2) G Cmac^ where Cmac given in (jHSI)- We wish 
to find a codebook that achieves {Rq, Ri, R2) with small probability of error, and achieves 
certain equivocation rates Ri^e and i?2,e- We consider (i?'^,i?2) that satisfy the following 
conditions: 

(/2o, -R'l, -R2) ^ ^MAc -^1 - -^'i' -^2 < R2 (99) 

and 

R[~I{X^■Y2\X2,Q)>0, R'2~IiX2;Yi\X^,Q)>0 (100) 

The cases where R[ — I{Xi; Y2\X2, Q) < or R'2~ I{X2] Yi\Xi, Q) <Q will be considered in 
Step 4. 

The following lemma states existence of a certain codebook, which will be used for encoding 
in Step 2. 
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Lemma 5. For a given rate triple (i?o, -Ri, -R2) ^ ^mac> ^here exists the following codebook: 



1?, ^ = l,...,2-«o 

™n 7 — 1 OnRo 

•^2Asti ^ ~ ^1 ■ ■ ■ 1 



a = 1,...,A;6= ) (101) 

s = 1, . . . , S*; t = 1, . . . , T; 



where all codewords are strongly typical, i.e., e T"(Pq), a;"j^f, G T"(Pxi|q|q'i"')5 ist ^ 
?r(-Px2|(3lQ'r) /'^'^ "^5 ■^^ ^- number of codewords are defined as follows: 



— log 

n 


;^ 


= ^'1- 


I{X^-Y2\X2 


Q), 


-log 


B 


= /(Xi 






n 




= R'2- 


/(X2;ri|Xi 


Q), 


— log 

n 




= I{X2 


>^i|Xi,Q). 





(102) 



We define the following probabilities of error when the codewords ^^f, and x^i^t o'^e trans- 
mitted by user 1 and user 2, respectively: 

\abst =Error probability for the destination to decode and x^^ist'^ 
Ai,6|jast =Error probability for user 2 to decode ^^j, given i, a, s, t; (103) 
^2,t\iabs =Error probability for user 1 to decode X2^ist given i, a, b, s. 

Let Piabst be the probability that codewords x^^^^ and are transmitted by user 1 and 
user 2, respectively. We further define the following average probabilities of error: 



^ — PiabstKabst] 
iabst 

last 

iabst 

A2 = ^7 Piabst ^2 ,t\iabs 



(104) 



iabst 



For sufficiently large n, the codebook described in p01|l satisfies 

A < e, Ai < e, and A2 < e, (105) 

for any arbitrary < e < 1. 

In Fig. ^2 we plot an example codebook that is described in the preceding lemma. We 
can interpret each row in the codebook as a subcodebook. If each of the two users randomly 
chooses one codeword from its codebook and sends it over the channel, the destination 
can decode these pair of codewords with small average error probability, because A < e. 
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a 
1 

2 

3 



^ ^ 2nI{Xr,Y2\X2Q) 



A = 

2n{R[~I{Xi;Y2\X2Q)) 



2 
3 



S = 

2n{R'2-I(X2;Yi\XiQ)) 



•^l.ill 


•^l,jl2 










•^l,i21 






























































Codebook for user 1 
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■^2,ill 


^2,jl2 










•^2,i21 





























































Codebook for user 2 
Figure 11: Codebook for users 1 and 2 



However, each user as a receiver can only decode the codeword sent by the other user with 
small average probability of error if it knows to which row the transmitted codeword belongs. 
This is because Ai < e and A2 < e. Therefore, while the destination decodes reliably over 
the entire codebook, the two users decode reliably only within rows of the codebook. 



Proof. We prove the lemma using a random coding technique. We define the following sum 
of error probabilities: 

Pe = A + Ai + A2 = PiabstiKahst + ^l,b\iast + ^2,t\iabs)- (106) 
iabst 

We show that the average of Pe over a random codebook ensemble is small for sufficiently 
large codeword length n. Then, there must exist at least one codebook such that is small 
for sufficiently large n. 
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For a given distribution p{q)p{xi\q)p{x2\q) , we construct random codebooks by the follow- 
ing generating steps. 

1. Generate 2"^° codewords g", each uniformly drawn from the set T"(Pq). Index g", 
i = 1,...,2"^». 

2. For each g", generate 2"-^'i codewords x", each uniformly drawn from the set T" (Pxi|q 
Index .^ft, a = 1, . . . , v4; 6 = 1, . . . , 5. 

3. For each q^, generate 2'^-^2 codewords X2, each uniformly drawn from the set T" (Px2|Q 
Index x^i^t, s = 1, . . . , S;t = 1, . . . ,T. 

Suppose the codewords a;"j^^ and are transmitted by user 1 and user 2, respectively, 
we define the following decoding strategies at the destination, user 1 and user 2. 

1. Destination declares that the indices of x" and X2 are i,a,b, s,t if there is a unique 
group of such indices such that (^^f ; 2;^^.^, j,-, y'^j G T^{PqxiX2y)- 

2. User 2, given i, a, s, t, declares that the index b of is b if there is a unique b such 
that (gr>a:;',,,g,4,si,Z/2) e T,"(PQx,x.yJ. 

3. User 1, given i, a, b, s, declares that the index t of Xa^j^^ is t if there is a unique t such 
that {q?,xl,,„xl.^^,y^) &T:{Pqx,x,y,). 

We can compute Ec[pe] by following the standard techniques as in [13 Chap. 14], where 
Ec indicates averaging over the random codebook ensemble. We can show that 

Ec[Pe] < e, (107) 

for sufficiently large codeword length n, by using the fact that (Pq, -R'l, R'2) ^ ^mac 
sizes of indices 6 and t are B = 2"-f(^i;'^2l^2''3) and T = 2"-^(^2;yi|Xi,Q)^ respectively. 

Hence there exists one codebook such that for sufficiently large codebook size n, 

Pe = X + Xi + \2< e. (108) 
This leads to the conclusion that for sufficiently large codebook size n 

A < e, Ai < e, and A2 < e. (109) 

□ 

Step 2: Encoding 

Based on the codebook given in Lemma El we define an encoding strategy to achieve the 
given rate tuple {Rq, Ri, R2) with certain equivocation rates {Ri^e,R2,e)- The equivocation 
rates (Pi,e, R2,e) will be computed in Step 3. 
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We first assume that Ri > R[-I{Xi; Y2\X2, Q) and R2 > -R2 ~/(X2; Yi\Xi, Q). The cases 
where Ri < R[ - /(Xi; 1^21^2, Q) or i?2 < ^2 " ^^2; Q) will be considered in Step 4. 

We denote common messages by Wq G W = [1,2"^"], and denote confidential messages 
sent by the two users by Wi e Wi = [1,2"'^'] and W2 e W2 = [l,2"-^2]^ respectively. We 
further define the following sets 

A=[1,A], B=[1,B], S=[1,S], T=[1,T] (110) 

where A,B,S,T are defined in (fTU^ . We let 

Wi = ^ X J (111) 

where J = [1, J] and ^ log J = i?i - [R[ - /(Xi; 1^21^2, Q)], and 

W2 = 5 X /C (112) 

where JC = [1, K] and ^ logiT = i?2 - [i?^ - /(X2; Q)]. 

We define the following mappings: 

gi : B ^ J , partitioning B into J subsets with nearly equal size; (113) 
g2 : T ^ IC, partitioning T into K subsets with nearly equal size, 

where "early equal size" means 

||^7r'(ji)|| <2||(7r'(j2)|| Vji,j2G J (114) 

and 

\\g2\h)\\<2\\g2\k2)\\ yh,k2ElC. (115) 

The two encoders at users 1 and 2 are defined in the following: 
/o : Wo^ {Qi}, mapping wq i; 

fi : {Wo, Wi) ^ {x'li^i,}, mapping wq i, and mapping wi = (a, j) (a, b), 

where b is chosen uniformly from the set gi^{j) C B; (116) 

/2 : (W^o, W^2) {x2,ist}^ mapping wq i, and mapping W2 = {s, k) {s, t), 
where t is chosen uniformly from the set g2^{k) C T. 

The idea of the above encoding strategy is as follows. From Step 1, it is clear that users 
decode reliably within rows of the codebook and are not able to decode across different rows. 
Hence each user tries to map its confidential messages across different rows of the codebook 
to prevent the other user from decoding its messages. 

Step 3: Equivocation Computation 

Based on the codebook given in Lemma El in Step 1 and the encoding functions defined in 
()116p in Step 2, we have the following joint probability distribution: 

p{wo)p{wi)p{w2)h{q''\wo)fi{x1\wo, Wi)/2(x^|wo, W2)p(2/", , 2/2 ki, X2). (117) 
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In (|117p . p{wo),p{wi) and ^(^2) are uniform distributions, i.e., the messages are uniformly 
chosen from the three message sets. The encoding function /q is a deterministic one-to-one 
mapping, and /i and /2 are random mapping functions as defined in ()116|1 in Step 2. For 
the joint distribution given in (jll7|) . we note the following two Markov chain conditions: 

W2 - iX^,Wo) {W,,X'^,Y,-,Y,\Y-); (118) 

and 

PFi (X^Wo) ^ iW2,XlY{',Y,^,Y^). (119) 

We first compute the equivocation rate of Wi at user 2 in the following. 

H{W,\Y,^,X^,Wo,W2) H{Wi\Y^,XlWo) 
= H{W,, Y,^\Xl Wo) - H{Y,^\Xl Wo) 

= H{W,,Y,\X^\XlWo) - H{X^\Wo,W,,Y,^,X^) - H{Y,^\XlWo) 
= H{W,,X'^\XlWo) + H{Y,^\Xl\XlWo,W,) - H{X'^\Wo,Wi,Y;\X^) 
~HiY,-\XlWo) 

> H{X^\Wo) + H{Y,^\X'^,X^) - H{X'^\Wo,W^,Y,^,X^) - H{Y,^\XlWo) 

In the preceding equation, (a) follows from the Markov condition given in ()118|) . The first 
term in (b) follows from the following 

HiW^,X^\XlWo) = HiX^lX^Wo) + HiW^\X^,XlWo) 
> HiX'^lX^, Wo) = HiX'^lWo) 

The second term in (6) follows from the fact that Y^ is independent of Wo, Wi given Xj^, . 

We now compute the four terms in p20p one by one. To compute the first term, we first 
show the following useful lemma. 

Lemma 6. ('^3]) Consider a discrete random variable X with the mass points being x\, . . . ,Xm 
and the probability mass function satisfying 

gi£^<2.2' VUe|l.....m|. (122) 

Then, 

H{X)>\ogm- 5 -I (123) 
Proof. Let pi = Pr{X = Xi} for i = 1, . . . ,m. Let 

Pmax = max{pi, . . . ,Pm}, and Pmin = ^i^{pi, ■ ■ ■ ,Pm}- (124) 

We have < 2 ■ 2*^ by assumption. Hence 



mm 



2-2^ 2-2^ 

m m 
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where we have used mpmin < 1- We can then bound the entropy of X as follows. 

m m 
H{X) = ^-pi log Pi > ^ -pi log Pmax 

i=i i=i (126) 

2 ■ 2^ 

= - logpmax > - log = log m - (5 - 1 

m 

□ 

For the first term in ()120|) . we note that for each Wq = i, X" has 2"-^'i possible values. 
According to the encoding mapping function fi defined in ()116|) . we have 

p^lxi ^^ny <^ Vx^a;^GK,,J (127) 
By using Lemma we obtain 

-HiX^lWo) > R'l - -. (128) 

n n 

For the second term in p20|) . we have 
1 



n 



-HiY^\X^,Xli) 



- P^{Xi = X^ = x-,}H{Y,-\X^ = XI = x^) 



n 



> - J2 Pr{X^ = X^ = xl}H{Y^\X'l = X^ = x^ 



n 



\ Pr{X^ = xlX- = x-} 



n 

{x1,x^)(^T^[Px^X2] 

Y N{a,b\x'l,x'^) Y -Piy2\a,b)logp{y2\a,b) 

> Pr{Xl = x\,Xl = xl} 
(x5',x5)eT»[PxiX2] 

Yi (^P{Xi = a,X2 = b) - ^ -p(y2|a,&)logp(?/2|a,&) 
Y Pr{X^ = ^i>^2" = x^}(i/(F2|Xi,X2) - 0(e) 

{x1,x^)eT^[Px-,x2] 

> {l-e)H{Y2\Xi,X2)~0{e) 
>HiY2\X^,X2)-0{t) 
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where 0(e) as e — > 0. In the above equation, (a) follows from the definition that 
(^"jXg) G T"[PxiX2]- The inequality (6) makes use of the following 

J2 Pr{Xf = x^, = x^}>l-pe>l- e. (130) 

To compute the third term in ()120p . we define 

if there is a unique b such that 

(QZo^^lv^oab, ^2, 2/2 ) e T;^(PQx.x.yJ (131) 
arbitrary otherwise 



Then 

Pr{X^^^p{Wo,W,,Y,\X^)} 

Pyjo,a,b,s,tPr{xl^^^^y^p{wo,wi,Y^,xl^^^,t)\wo,a,b,s,t} (^^32) 



wo,a,b,s,t 

= Ai < e 

Therefore, by Fano's inequality, we obtain 

-H(X^\Wo, Wi, KT, X:')<-(l + Ai log2"(^°+^'iA < es (133) 
n n \ / 

where €2 is small for sufficiently large n. 
To compute the fourth term in ()120|) . we define 

] arbitrary otherwise 

We then obtain 
1 



n 



-HiY,^\Wo,Xl 



= 1 V Pr{iyo = Wo,X^ = x^}H{Y,^\X^ = x^Wo = Wo) 
< 1 V PrjPFo = ^^0,^2 = x^}H{Y,^,Y2\Wo = Wo,X^ = x^) 

^ n 

i V Pr{Wo = w,,Xl^ = x'^} 

(//(K^l W^o = w^o, ^2" = a;^) + H{Y:,-\W^ = Wo, X^ = xl Y^ 



n 



(135) 
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The first term in the preceding equation can be bounded as 

^ Pr{Wo = Wo, = x^}H{Y,^\Wo = wq, = x^) 

< i ^ Pr{Wo = Wo,X^ = x-,}\og\\T:{Py2\x,,Q\qZ„xm 

^ n 

< J2 Pr{Wo = Wo,X^ = x^}iH{Y2\X2,Q) + e) 
<H{Y2\X2,Q)+e 

To bound the second term in we use Fano's inequahty and obtain 

i J2 Pr{Wo = wo, X^ = x-,}H{Y,-\Wo = wo, X^ = xl, f^") 
100,2:2 

< i ^ Pr{Wo = Wo, X^ = x^} (1 + Pr{Y,^ ^ Y,^\Wo = Wo, X^ = x^} log | J'sP) 

Wo,X2 

- + V Pr{Wo = Wo,X^ = x^,} 

n < ' 



(136) 



n 

wo,x'^ 



■ Pr{{ql,,xl vl) i T-^{Pqx,y,)\Wo = wo, X^ = x^] log 13^2 
<1+ V Pr{Wo = wo,X^ = xlX^ = x1} 



n 

wo,x",X2 



Pr\ (g" , x^ x^, 2/2") ^ T:{Pqx,x,y,) log 13^2 



< - + V Pr{Wo = Wo, X^ = xl X^ = log |3^2| 
n ^-^ 

Wo,x",X2'- 
{q^^,x^,x^)iT^ 

WQ,X" ,X2'- 

■ Pr{{ql„ xl vl) i T^{Pqx.x,y,)} log m 

<e3 



(137) 



where €3 is small for sufficiently large n. In the preceding equation, the second term in (a) 
is small because 

Y PriWo = Wo, XI = xl = } <pe<e. (138) 

wo,x",X2: 
(q^^,x1,x^)<^Tp 
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Hence, the fourth term in (|12Up is 

1 



n 



H{Y^\Wo,Xl^) < H{Y2\X2,Q) + e^ (139) 



Substituting (IT^ . (IT^ . (IT!^ and (IT!^ into (i™ . we obtain 

i^(w^l|r2^X2^^yo,w^2) > i?; + if(r2|Xi,X2) -//(r2|X2,Q) -£4 

= i?; + i/(F2|Xi, X2, g) - /f(F2|X2, g) - (mo) 

= i?;-/(Xi;F2|X2,g)-e4 
where €4 is small for sufficiently large n. 
Similarly, we can also obtain 

H{W2\Y^,X^,Wo,W^) > R',-I{X2;Y,\X,,Q)-e, (141) 

where €5 is small for sufficiently large n. 

Hence, using the codebook given in Lemma El in Step 1 and the encoding functions defined 
in (|116|) in Step 2, the equivocation rates for sufficiently large n are given by 



and 



Ri,e<R'i-IiXi;Y2\X2,Q) (142) 
R2,e<R2-I{X2;Y,\X,,Q). (143) 



Step 4: Other Cases 



In Step 1, we have assumed that R[ > I{Xi;Y2\X2,Q) and i?2 > -^^(-^2; g)- If 

R'l < -^(-^1; ^2|-^2, g), we generate 2""^^ codewords a;", and do not require Ai < e in Lemma 
El We set = 0. Similarly, if R'^ < /(X2; Q), we set /?2,e = 0. 

In Step 2, we have assumed that Ri > R[-I{Xi; 1^21-^2, Q) and R2 > R'2-I{X2; Yi\Xi, Q). 
If Ri < R[ — I{Xi; F2|-^2, g), we change the encoder fi to be the following: 

/i : {Wo,Wi) {a;"i„J, mapping {wo,Wi) xl^^^^,,, 

where b is chosen uniformly from the set [1^ 2"^'^^^'^2l"^2''^^] 

In this case, note that the number of codewords is less than the number of rows in the 
codebook. The encoding strategy is to map each codeword to each row. It is expected that 
in this case the other user (user 2) is not able to decode any information, and hence user 1 
achieves perfect secrecy. 

In fact, the first term of the equivocation rate in ()12()j) becomes 

-H{X,\Wo) = Ri + I{X,;Y2\X2,Q) (145) 
n 
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because for each Wq = i, has 2"'('^i+^("^i'^2|X2,Q)) possible equally likely values. All other 
terms in (I120D remain the same as before. We hence have 



H{W^\Y,^,XlWo,W,) 

>Ri + /(Xi; Y2\X2, Q) + H{Y2\X^,X2) - HiY^lX^, Q) - e 
= i?i + /(Xi; Y,\X2, Q) - /(Xi; Y^lX^, Q) - e 
= Ri-e. 



(146) 



Thus, for sufficiently large n, 



and user 1 achieves perfect secrecy. 



(147) 



We can similarly obtain that if R2 < R'2 — /(X2; lilXi, Q), user 2 achieves perfect secrecy, 
i.e., 

i?2,e < R2. (148) 

Hence in summary, for a given point (i?o, -Ri, -R2) G C^/^C) the achievable equivocation 
rate pairs are in the set Se(Ro, -^1,-^2) defined in 



6.4 Proof of Theorem [SI 

In this section, we change Se{Ro, R11R2) given in ()7()j) to an explicit form that is characterized 
by inequality bounds only. We need only to derive the explicit form for Se{Ro, -Ri, -R2) given 
in The explicit form for Se{Ro, Ri, R2) follows by prefixing two discrete memoryless 

channels to the GMAC as reasoned at the beginning of Section 16.21 

We first characterize Se{RQ, Ri, R2) given in ()90|) in a more convenient form. We define 
the following set B{Re, Ri, R2) of {R[, R'2): 

{R'i,R'2) : 

R[<I{X,;Y\X2,Q), 
R', + R2<I{X,,X2;Y\Q), 
Ro + R[ + R2<I{Xi,X2;Y) 

R'2<I{X2;Y\X,,Q), } (149) 

R, + R'2<IiX,,X2;Y\Q), 
R^ + Ri + R'^<I{X^,X2;Y) 
R[ + R',<IiX,,X2;Y\Q), 
[ R^ + R[ + R',<I{X,,X2;Y) 



B{Ro, Ri, R2) :-- 



For Se{Ro, -Ri, -R2), if we replace union over the set ^(-Ro, -Ri, -R2) with union over the set 
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B{Ro, Ri, R2) as in the following, the region Se{Ro, Ri, R2) remains unchanged; i.e., 



Se{Ro, Ri, R2) — [J 



{Rl,ei R2,e) '■ 
< i?i,e < Rl 

Ri,e<[R[-nXuY2\X2,Q)U >• 

0<i?2e<^2 

[ R2,e<[R'2-HX2;Y,\x,,Q)U , 



(150) 



To see this, we plot the two sets .4(-Ro, -Ri, R'l) and B{Ro, Ri, R2) in Fig. [121 For any point 
{r[, r'2) that is in B{Rq, Ri, R2) but not in A{Rq, Ri, R2), there exists a corresponding point 
{f[, f'2) G ^(-Ro; R11 R2) such that r[ < f[ and r2 < f'^. Hence 



{Rl,e, R2,e) '■ 
< Rl,e < Rl 

Rl,e<K-I{X^;Y2\X2,Q)U 

< i?2,e < R2 

[ R2,e<[r'2-IiX2■,Y,\X^,Q)]^ J 



{Rl,e, R2,e) '■ 
< Rl,e < Rl 

> C <! R,,e<[r[~nX,;Y2\X2,Q)] + 

< i?2,e < R2 

[ R2,e<[r'2-IiX2;Y,\X,,Q)]+ J 



(151) 



Therefore, those points that are in B{Ro, Ri, R2) but not in A{Ro, Ri, R2) do not contribute 
new (i?i,e, -R2,e) for Se{Ro, Rl, R2)- 

We now show that Se{Ro, Ri, R2) given in p50|l is equivalent to the following region 
iSg(i?o, Rl, -^2)- 



where 



Ci 



5' = £1 U £2 U £3 



(i?l e, -R2,e) ■ 

< i?l,e < < i?2,e < ^2 

< '[/(Xi; y 1X2, Q) - /(Xi; ^21X2, Q)] + , 

< [/(Xi, X2; r IQ) - i?2 - /(Xi; y2|X2, Q)]+, 

< [/(Xi, X2; r) - i?o - i?2 - /(Xi; r2|X2, Q)]+ 
i?2,e < [/(X2; r |Xi, Q) - /(X2; FilXi, g)]+, 

i?2,e < [/(Xi, X2; Y\Q) - i?i - /(X2; FilXi, Q)] + , 
R2,e < [/(Xi, X2; r) - i?o - i?i - /(X2; FilXi, Q)] + 
i?i,e + i?2,e < [/(Xi, X2; F|Q) - /(Xi; 1^21X2, Q) - /(X2; FilXi, Q)] + , 
+ i?2,e < [/(Xi, X2; r) - i?o - /(Xi; 1^21X2, Q) - /(X2; FilXi, Q)]+ 



(i?l e, -R2,e) : 

^ ^l,e ^ ^1; 

^ ^1 /?i,e<'[/(Xi;F|X2,Q)-/(Xi;F2|X2,Q)] + , 

^ i?i,e< [/(Xi,X2;r|Q)-i?2-/(Xi;F2|X2,g)]+, 
Ri,e < [/(Xi, X2; r) - i?o - i?2 - /(Xi; F2IX2, Q)l 

R2,e = 



(152) 



> (153) 



(154) 
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i?2 
i 




I ^ R, 

(a): Region A{Ro,Ri,R2) of {R'^.R^)- 




(b): Region B{Ro,Ri,R2) of (i?'i,i?2) 
Figure 12: Regions A{Ro, Ri, R2) and B{Ro,Ri,R2) of (/?'i,i?2) 



and 



(-Rl,e, -R2,e) '■ 
Rl,e = 0, 
< -R2,e ^ -R25 

i?2,e < [/(X2; y |Xi, Q) - /(X2; FilXi, Q)]+, 
i?2,e < [/(Xi, X2; F|Q) - i?i - /(X2; FilXi, g)]+, 

[ i?2,e < [/(Xi, X2; y) - i?o - i?i - /(X2; FiiXi, g)]_ 



(155) 



We first show Se{Ro, Ri, R2) C S'^{Ro, Ri, R2). For a point (ri g, r2,e) G Se{Ro, Ri, R2), we 
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consider the following four cases. 
Case 1. If ri^e > and r2,e > 0, then there exits {R[, R2) € B{Ro, Ri, R2), such that 

< ri,e < R[ - I(X,;Y2\X2,Q) (156) 

and 

< r2,e <R'2- /(X2; FilXi, Q). (157) 

Applying the bounds that {R[, R'2) G B{Rq, Ri, R2) needs to satisfy to the preceding inequal- 
ities, it is clear that (ri^e, ''"2,e) G -^i- 

Case 2. If ri^e > and r2,e — 0, then it is easy to check that (ri^g; f2,e) G '^^2- 

Case 3. If ri,e = and r2,e > 0, then it is easy to check that (ri,e, r2,e) £ A. 

Case 4. If ri^e = and r2,e = 0, then it is trivially true that (ri g, r2,e) G ^'eiRo^ Ri, -^2)- 

We now show that 5^(i?o, ^2) C S^iRo, Ri, R2). We first show £i{Ro,Ri,R2) C 
Se{Ro, Ri, R2)- We consider the following four cases. 

Case 1. If ri^e > and r2,e = 0, then wc lot r[ = ri.e + /(Xi; 1^21-^2, Q) and r2 = i?2- From 
the first three bounds that define Ci{Ro, Ri, R2) and (/?o, Ri. R2) G C^^^, it is easy to check 
that (r;,r^) G i3(i?o, i?2)- Hence (ri,e,r2,e) G 4(^0,^1,^2)- 

Case 2. If ri e = and r2,e > 0, then it can be similarly checked that (ri,e,r2,e) G 
Se{Ro, Ri, R2) as in Case 1. 

Case 3. If ri^g > and r2,e > 0, then let r\ = ri^e + -^(-^1; ^2|-^2, Q) and r2 = r2,e + 
/(X2: ^2!-^!, Q)- It is easy to check that {r[,r'2) G B{Ro, Ri, R2). Hence (ri^e,r2,e) G 

Se{Ro, Ri, R2). 

Case 4. If ri^e = and r2,e — 0, then it is trivially true that (ri,e, r2,e) G Se{RQ, Ri, R2)- 

Finally, the conditions C2{Rq, Ri, R2) C Se{Ro, Ri, R2) and C2{Rq, Ri, R2) C Se{Ro: Ri, R2) 
can be similarly shown as in Case 1 and Case 2, respectively. 

7 Conclusions 

We have studied the capacity-equivocation region of the GMAC with confidential messages. 
For the GMAC with one confidential message set, we have derived inner and outer bounds on 
the capacity-equivocation region. Although the two bounds only match partially, they are 
tight enough to characterize the secrecy capacity region, where confidential messages sent 
by user 1 are perfectly hidden from user 2. For the degraded GMAC, we have established 
the capacity-equivocation region. We have further derived the capacity-equivocation region 
for two examples of degraded GMACs. In particular, we have found that the capacity- 
equivocation region of GMACs with confidential messages depends only on the marginal 
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channels p{y\xi,X2), p{yi\xi,X2), and p{y2\xi,X2). Based on this observation, we have ob- 
tained the capacity-equivocation region for the Gaussian GMAC (not necessarily physically 
degraded) with one confidential message set. 

We have also obtained an achievable rate-equivocation region (inner bound on the capacity- 
equivocation region) for the general case of the GMAC with two confidential message sets. 
The region takes a much more complicated form than the case of the GMAC with one 
confidential message set. We have further derived an equivalent but explicit form for the 
achievable rate-equivocation region. Moreover, we have shown that the achievable rate- 
equivocation region for the case of two confidential message sets carries a new feature of a 
trade-off between the two equivocation rates corresponding to the two confidential message 
sets sent by the two users. 
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